DNS Enumeration & Reconnaissance Tool
High-performance DNS enumeration tool written in Go, demonstrating:
- Goroutines - Concurrent DNS lookups
- Channels - Safe communication between workers
- Context - Timeout and cancellation handling
- Sync Primitives - Mutex and atomic operations
- Interface Design - Clean abstractions
git clone https://github.com/bad-antics/nullsec-dnsenum.git
cd nullsec-dnsenum
go build -o dnsenum dnsenum.go# Basic enumeration
./dnsenum -d example.com
# With custom wordlist
./dnsenum -d example.com -w subdomains.txt
# High concurrency
./dnsenum -d example.com -c 100
# JSON output
./dnsenum -d example.com -j
# Save results
./dnsenum -d example.com -o results.json- A, AAAA, MX, NS, TXT, CNAME record lookup
- Subdomain brute-force enumeration
- Built-in 100+ word default wordlist
- Concurrent workers with configurable count
- JSON output for automation
- Progress display
╔══════════════════════════════════════════════════════════════════╗
║ NullSec DNSEnum - DNS Reconnaissance Tool ║
╚══════════════════════════════════════════════════════════════════╝
Target: example.com
Workers: 50 | Timeout: 3s
=== Domain: example.com ===
A Records:
93.184.216.34
MX Records:
[10] mail.example.com
NS Records:
ns1.example.com
ns2.example.com
Subdomains Found: 12
[+] www.example.com
A: 93.184.216.34
[+] mail.example.com
A: 93.184.216.35
[+] api.example.com
A: 93.184.216.40
CNAME: api-lb.example.com
─────────────────────────────────────────
Checked: 100 | Found: 12 | Duration: 2.4s
- Discord: discord.gg/killers
- GitHub: bad-antics
MIT License