dnsrecon

No entries match these filters. Clear filters

1. docs update Oct 10, 2026 · issue 101

   dnsrecon now reads RT exchange fields and converts binary rdata to text for zone transfer records in JSON output.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Reads RT (Route Through) exchange field in DNS records.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

2. docs update Oct 10, 2026 · issue 101

   dnsrecon adds Shodan netblock expansion via --shodan, --shodan-active, --shodan-key flags and a REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. with DNSRECON_WORDLIST_DIRS wordlist control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Expand SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders. and WHOIS netblocks with Shodan passive lookup during a standard enumeration run.
   copy

   $ uv run dnsrecon -d example.com -t std -s -w --shodan --shodan-key "$SHODAN_API_KEY"

   Trigger Shodan-backed netblock expansion via the REST API, including active Shodan scanning, without embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. the key in the URL.
   copy

   $ curl -H "X-Shodan-Api-Key: $SHODAN_API_KEY" "http://127.0.0.1:5000/general_enum?domain=example.com&do_spf=true&do_whois=true&do_shodan=true&shodan_active=true"

   Allow the REST API to resolve wordlist paths from custom directories without exposing sensitive filesystem areas.
   copy

   $ export DNSRECON_WORDLIST_DIRS="/opt/dnsrecon-wordlists:/srv/shared-wordlists"

   • Adds --shodan, --shodan-active, and --shodan-key CLI flags to expand netblocks discovered via SPF (-s) and WHOIS (-w) using Shodan during standard enumeration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds SHODAN_API_KEY environment variable as an alternative to passing the key via --shodan-key on the command line.
   • Adds DNSRECON_WORDLIST_DIRS environment variable to specify additional directories (colon-separated on POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems.) from which REST API wordlist parameters may reference files.
   • Adds REST API endpoint /general_enum with do_spf, do_whois, do_shodan, and shodan_active query parameters and X-Shodan-Api-Key header for Shodan-backed enumeration.
   • Adds a REST API (restdnsrecon.py) alongside the existing CLI tool.

   5 details in Everything

3. docs update Sep 15, 2026 · issue 075

   DNSRecon adds Shodan netblock expansion via --shodan, --shodan-active, --shodan-key, REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., and DNSRECON_WORDLIST_DIRS env var⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Expand discovered netblocks via both SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders. and WHOIS data through Shodan during a standard enumeration run, using active scanning.
   copy

   $ uv run dnsrecon -d example.com -t std -s -w --shodan --shodan-active --shodan-key "$SHODAN_API_KEY"

   Trigger Shodan netblock expansion through the REST API with active mode enabled, supplying the key in a header.
   copy

   $ curl -H "X-Shodan-Api-Key: $SHODAN_API_KEY" "http://127.0.0.1:5000/general_enum?domain=example.com&do_spf=true&do_whois=true&do_shodan=true&shodan_active=true"

   Allow the REST API wordlist parameters to reference files from custom directories without exposing sensitive filesystem paths.
   copy

   $ export DNSRECON_WORDLIST_DIRS="/opt/dnsrecon-wordlists:/srv/shared-wordlists"

   • Adds --shodan, --shodan-active, and --shodan-key CLI flags to expand netblocks discovered via SPF (-s) and WHOIS (-w) data using Shodan during standard enumeration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds --shodan-key alternative via the SHODAN_API_KEY environment variable for keyless CLI invocation.
   • Adds do_shodan=true and shodan_active=true query parameters to the /general_enum REST API endpoint, and accepts the Shodan key via the X-Shodan-Api-Key request header.
   • Adds DNSRECON_WORDLIST_DIRS environment variable to specify additional directories (colon-separated on POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems.) from which API wordlist parameters may reference files.
   • Enforces a thread_num range of 1..100 on REST API requests.
   • Adds --shodan, --shodan-active, and --shodan-key CLI flags to expand netblocks discovered via SPF (-s) and WHOIS (-w) data using Shodan during standard enumeration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds --shodan-key alternative via the SHODAN_API_KEY environment variable for keyless CLI invocation.
   • Adds do_shodan=true and shodan_active=true query parameters to the /general_enum REST API endpoint, and accepts the Shodan key via the X-Shodan-Api-Key request header.
   • Adds DNSRECON_WORDLIST_DIRS environment variable to specify additional directories (colon-separated on POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems.) from which API wordlist parameters may reference files.

   1 more in Everything

4. docs update Sep 15, 2026 · issue 075

   dnsrecon: Adds --shodan-active CLI flag to perform active Shodan scanning during netblock expansion.

   └──▷ TRY IT
   Expand netblocks discovered during standard enumeration through SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders. and WHOIS data using Shodan passive lookups.
   copy

   $ uv run dnsrecon -d example.com -t std -s -w --shodan --shodan-key "$SHODAN_API_KEY"

   Trigger Shodan-backed netblock expansion via the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., including active scanning, without embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. the API key in the URL.
   copy

   $ curl -H "X-Shodan-Api-Key: $SHODAN_API_KEY" "http://127.0.0.1:5000/general_enum?domain=example.com&do_spf=true&do_whois=true&do_shodan=true&shodan_active=true"

   Allow the REST API wordlist parameter to reference custom wordlist directories without exposing broad filesystem paths.
   copy

   $ export DNSRECON_WORDLIST_DIRS="/opt/dnsrecon-wordlists:/srv/shared-wordlists"

   • Supports setting the Shodan API key via the SHODAN_API_KEY environment variable instead of --shodan-key.

   1 detail in Everything

5. docs update Aug 31, 2026 · issue 060

   dnsrecon 1.5.0 adds a REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. server via restdnsrecon.py, backed by FastAPI and rate-limiting.

   • New restdnsrecon.py script launches a REST API server for DNSrecon, enabling programmatic DNS reconnaissance over HTTP.

   1 detail in Everything

6. docs update Aug 31, 2026 · issue 060

   dnsrecon 1.5.3 adds recursion control to DnsHelper with new CLI options; 1.5.2 adds Python 3.14 support

   • Adds recursion control to DnsHelper with corresponding CLI options, giving practitioners direct control over DNS query recursion behavior.
   • Switches crt.sh certificate transparency enumeration from HTML scraping to the JSON API for more reliable subdomain discovery.

   2 details in Everything

7. docs update Aug 31, 2026 · issue 060

   dnsrecon 1.5.3 adds recursion control to DnsHelper with new CLI options and switches crt.sh enumeration to the JSON API.

   • Removes the lxml dependency, simplifying installation with no external XML library required.

   1 detail in Everything

8. docs update Aug 31, 2026 · issue 060

   dnsrecon 1.6.0 adds Shodan integration for netblock expansion during DNS enumeration

9. docs update Aug 1, 2026 · issue 032

   dnsrecon gains Shodan netblock expansion via CLI flags and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. for passive and active host discovery

   └──▷ TRY IT
   Expand discovered netblocks with Shodan data during a standard enumeration — useful for finding additional hosts beyond DNS alone.
   copy

   $ uv run dnsrecon -d example.com -t std -s -w --shodan --shodan-key "$SHODAN_API_KEY"

   Confirm Shodan-discovered hosts still resolve to the expected netblock before acting on them.
   copy

   $ uv run dnsrecon -d example.com -t std -s -w --shodan --shodan-active --shodan-key "$SHODAN_API_KEY"

   Trigger Shodan netblock expansion via the REST API with active validation — suitable for pipeline or automation use.
   copy

   $ curl -s -H "X-Shodan-Api-Key: $SHODAN_API_KEY" "http://127.0.0.1:5000/general_enum?domain=example.com&do_spf=true&do_whois=true&do_shodan=true&shodan_active=true"

   • Adds --shodan and --shodan-key flags to enrich enumeration results with Shodan data from SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders. and WHOIS netblocks.
   • Adds --shodan-active flag to re-resolve discovered hosts and confirm they still match the queried netblock.
   • Supports SHODAN_API_KEY environment variable as an alternative to passing the key on the command line.
   • Adds REST API (restdnsrecon) with /general_enum endpoint supporting do_shodan and shodan_active query parameters and X-Shodan-Api-Key header.
   • Adds DNSRECON_WORDLIST_DIRS environment variable to let the REST API load wordlists from custom directories using the platform path separator.

   5 details in Everything

10. 1.6.1 May 23, 2026 · release notes

    dnsrecon 1.6.1 adds DNSRECON_WORDLIST_DIRS env var to restrict REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. wordlist access

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.1 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.6.1

    • REST API now accepts only bundled wordlists or files within paths defined by DNSRECON_WORDLIST_DIRS

    1 detail in Everything

11. 1.6.0 Feb 28, 2026 · release notes

    dnsrecon 1.6.0 adds Shodan integration for netblock expansion during DNS enumeration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.6.0

12. 1.5.3 Dec 30, 2025 · release notes

    dnsrecon 1.5.3 adds recursion control to DNS queries and switches crt.sh to a more reliable JSON API.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.5.3 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.5.3

    • Adds recursion control to DnsHelper and new CLI options to enable or disable DNS recursion during enumeration.
    • Switches crt.sh certificate transparency enumeration from HTML scraping to the JSON API for improved reliability.

    2 details in Everything

13. 1.5.2 Dec 23, 2025 · release notes

    dnsrecon 1.5.2 adds Python 3.14 support and migrates CI to uv.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.5.2 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.5.2

    • Added support for Python 3.14

    1 detail in Everything

14. 1.5.1 Sep 1, 2025 · release notes

    dnsrecon 1.5.1 adds automatic retry support for crt.sh certificate transparency scraping.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.5.1 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.5.1

    └──▷ BREAKING ON UPGRADE

    • !New required Python dependency stamina==25.1.0 must be installed; existing deployments will break without it.
15. 1.5.0 Jul 27, 2025 · release notes

    dnsrecon 1.5.0 ships a REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., enabling programmatic DNS recon via HTTP instead of CLI invocation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.5.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.5.0

    └──▷ TRY IT
    Stand up the DNSrecon REST API locally so other tools or scripts can query it over HTTP.
    copy

    $ python restdnsrecon.py

    • New REST API for DNSrecon, launched via restdnsrecon.py, enables programmatic access to recon capabilities over HTTP.

    1 detail in Everything

16. 1.4.0 Jul 20, 2025 · release notes

    dnsrecon 1.4.0 adds CAA record support and enforces custom nameservers in all DNS queries.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.4.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.4.0

    • Adds CAA (Certification Authority Authorization) record support to DNS enumeration.
    • Ensures user-provided nameservers are consistently used across all DNS queries.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Python 3.12 is now the minimum supported version; setups running older Python versions will break on upgrade.
17. 1.3.0 Oct 20, 2024 · release notes

    dnsrecon 1.3.0 adds bulk domain input via -iL, a flag to skip NXDOMAIN hijack checks, and structured logging via loguru.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.3.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.3.0

    └──▷ TRY IT
    Run DNS recon against a large target list (e.g., all domains in a bug bounty scope) without manually looping over each domain.
    copy

    $ dnsrecon -iL targets.txt -t std -o results.json

    • Adds -iL flag (nmap-style) to pass a file containing a list of input domains for bulk enumeration.
    • Adds flag to disable the NXDOMAIN hijacking check, useful in environments where ISP/DNS hijacking would produce false positives.
    • Adds structured logging functionality powered by the loguru library.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Python 3.11 is now the minimum required version; setups running older Python versions will break.
    • !loguru and requests are now required dependencies; installations without them will fail to run.
18. 1.1.1 Jun 7, 2022 · release notes

    dnsrecon 1.1.1 adds nameserver resolution by name and multi-range support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.1 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.1.1

    └──▷ TRY IT
    Scan multiple /24 subnets for DNS records against a target domain.
    copy

    $ dnsrecon -d example.com -r 192.168.1.0/24,10.0.0.0/24

    Query a specific nameserver using its hostname.
    copy

    $ dnsrecon -d example.com -n ns1.example.com

    • Supports scanning multiple IP ranges in a single execution.

    1 detail in Everything

19. 1.1.0 Apr 10, 2022 · release notes

    dnsrecon 1.1.0 adds Python module support with dnsrecon wrapper and improves zone transfer tests

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0

    • Improved Zone Transfer and PTR tests for better reliability during reconnaissance.

    1 detail in Everything

20. 0.10.1 Apr 5, 2021 · release notes

    dnsrecon 0.10.1 adds --version CLI flag and writes queried domains to SQLite DB.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.10.1 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 0.10.1

    • Adds the --version (short: -V) flag for displaying the program version
    • Writes queried domain names into a SQLite database table under the domain column

    2 details in Everything

21. 0.10.0 Feb 7, 2021 · release notes

    dnsrecon 0.10.0 adds NXDOMAIN hijacking checks, multiple resolver support, and a Yandex subdomain enumerator module

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.10.0 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 0.10.0

    • Adds --disable_checks flag to disable specific DNS validation checks during enumeration
    • Adds --multiple_resolvers capability to specify multiple DNS resolvers for robust lookups
    • Adds new check_nxdomain_hijacking detection logic to identify misconfigured NXDOMAIN responses
    • Adds Yandex subdomain enumeration module via the yandex enumerator integration

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropped support for Python 2.7; minimum version is now Python 3.6
22. 0.8.11 Oct 23, 2017 · release notes

    Adds Bing enumeration support to dnsrecon

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.8.11 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 0.8.11

    └──▷ USE IT
    Enumerate DNS records using Bing as the source instead of only default sources.
    shell copy

    dnsrecon -d example.com -b

    • Supports Bing for domain enumeration

    1 detail in Everything

23. 0.8.8 Jul 26, 2014 · release notes

    dnsrecon 0.8.8 adds JSON output support for saving scan results

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.8.8 https://github.com/darkoperator/dnsrecon.git
    # already have the repo? check out this version:
    $ git checkout 0.8.8

    • -j (implied via "Support for saving results in to a JSON file") enables exporting DNS recon results as a JSON file.

    1 detail in Everything