dnsx

No entries match these filters. Clear filters

1. v1.3.0 Jul 16, 2026 · issue 018

   dnsx v1.3.0 adds automatic wildcard detection, custom output templates, query timing, and inline host input.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.0 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.3.0

   └──▷ TRY IT
   Automatically filter wildcard domains during subdomain brute-force without manual configuration.
   copy

   $ dnsx -d example.com -w wordlist.txt -auto-wildcard -silent

   Emit a custom one-liner per result (host, A record, and query time) to feed into downstream parsers or reports.
   copy

   $ subfinder -silent -d example.com | dnsx -silent -a -ot '{{host}} {{a}} {{query-time}}'

   Resolve a quick ad-hoc list of hosts passed inline without creating a file.
   copy

   $ dnsx -l example.com,api.example.com,dev.example.com -a -resp

   • Adds -auto-wildcard flag for automatic wildcard DNS detection, supporting multiple registrable roots and A/AAAA-based filtering.
   • Adds -output-template / -ot flag for customizable output using template fields such as {{host}}, {{a}}, {{aaaa}}, {{ip}}, and {{query-time}}.
   • Adds query-time response field to expose per-query DNS timing in output.
   • Supports inline and comma-separated host input directly on the command line (no file required).

   4 details in Everything

2. v1.2.3 Dec 10, 2025 · release notes

   dnsx v1.2.3 adds response type filtering and configurable DNS query timeouts.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2.3 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.2.3

   └──▷ TRY IT
   Set a tight DNS query timeout when scanning large target lists to avoid stalling on slow resolvers.
   copy

   $ dnsx -l targets.txt -a -timeout 2

   • Adds response type filter option to narrow DNS results by record type in output.
   • Adds configurable timeout flag to control DNS query timing.

   2 details in Everything

3. v1.2.2 Feb 1, 2025 · release notes

   dnsx v1.2.2 adds DNS over SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support for anonymous or proxied DNS resolution.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2.2 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.2.2

   • Supports routing DNS queries through a SOCKS5 proxy for anonymous or network-constrained resolution.

   1 detail in Everything

4. v1.2.0 Mar 3, 2024 · release notes

   dnsx v1.2.0 adds -recon flag for full DNS record enumeration and -e for exclusion.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.2.0 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.2.0

   └──▷ TRY IT
   Enumerate all DNS record types for a target domain quickly during recon.
   copy

   $ echo example.com | dnsx -recon

   Filter out specific record types like TXT or MX from the full enumeration output.
   copy

   $ echo example.com | dnsx -recon -e TXT,MX

   • Adds -recon flag to enumerate all available DNS records (A, MX, NS, SOA, TXT, etc.) in a single pass
   • Adds -e flag to exclude specific DNS query types when using the -recon enumeration mode

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The -asn option now requires an authenticated API key via the -auth flag or the PDCP_API_KEY environment variable due to the ASNMap upgrade.
5. v1.1.5 Sep 22, 2023 · release notes

   dnsx v1.1.5 adds ANY query support via -any flag and --omit-raw to suppress DNS response payloads in JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. output

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.1.5 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.1.5

   └──▷ TRY IT
   Pull all available record types for a target using the new ANY query capability.
   copy

   $ echo hollisterco.com | dnsx -any -resp

   Generate JSONL output containing only resolved IPs and records, without the verbose raw DNS payload.
   copy

   $ echo example.com | dnsx -json --omit-raw

   • Adds the -any flag to enable ANY-type DNS queries (e.g., pulling TXT, CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin., or other record types in a single request)
   • Adds --omit-raw / -or flag to remove the raw DNS response field from JSONL output

   2 details in Everything

6. v1.1.2 Feb 13, 2023 · release notes

   dnsx v1.1.2 adds ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. input/output, SRVSRVA DNS record type that advertises the hostname and port for a specific service, letting clients discover endpoints without hardcoded addresses. query support, and placeholder-based wordlists for DNS brute-forcing.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.1.2 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.1.2

   • dnsx adds support for SRV DNS queries to resolve Service Location records directly from the CLI.
   • dnsx introduces placeholder-based wordlists for DNS Bruteforce attacks, allowing dynamic generation of targets during enumeration.

   2 details in Everything

7. v1.1.1 Sep 28, 2022 · release notes

   dnsx v1.1.1 adds CAA and AXFRAXFRA DNS zone transfer request that asks a nameserver to send every record in a zone at once, letting cyber tools enumerate all hostnames in a domain if the server is misconfigured to allow it. query support plus CDNCDNA content delivery network, servers distributed across locations that cache and serve content near readers. It can reduce loading time and traffic to the original server. detection.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.1.1 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.1.1

   └──▷ USE IT
   Check CAA records for a domain to see which CAs are authorized to issue certs.
   shell copy

   dnsx --domain example.com -caa

   Attempt an AXFR zone transfer against a nameserver for subdomain discovery.
   shell copy

   dnsx --name-server ns1.example.com -axfr

   • Adds --caa flag to query and return CAA records for domains
   • Adds --axfr flag to perform DNS zone transfers (AXFR)

   2 details in Everything

8. v1.0.8 Feb 16, 2022 · release notes

   dnsx v1.0.8 adds DNS brute-force mode, stdin for domain/wordlist, TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. fallback on truncation, and internal IP info in JSON output

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.0.8 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.0.8

   • Enables stdin piping for the domain and wordlist flags via --stdin support
   • Includes internal IP information in JSON output format when using -json flag

   2 details in Everything

9. v1.0.7 Nov 19, 2021 · release notes

   dnsx v1.0.7 adds TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery./DOHDOHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring. resolver support, goflags, and hosts file reading.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.0.7 https://github.com/projectdiscovery/dnsx.git
   # already have the repo? check out this version:
   $ git checkout v1.0.7

   • Adds TCP/UDP/DOH resolver input support
   • Adds goflags support for configuration parsing
   • Adds hosts file read support to resolve names via the local system's /etc/hosts or hosts file

   3 details in Everything

10. v1.0.5 Jun 29, 2021 · release notes

    dnsx v1.0.5 adds -rcode flag for DNS status codes, JSON timestamp field, and CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. input support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0.5 https://github.com/projectdiscovery/dnsx.git
    # already have the repo? check out this version:
    $ git checkout v1.0.5

    └──▷ TRY IT
    Probing DNS servers to distinguish between NXDOMAIN and SERVFAIL responses during reconnaissance.
    copy

    $ dnsx -d example.com -rcode

    Feeding a subnet directly without expansion for bulk DNS auditing.
    copy

    $ dnsx -i 10.0.0.0/24

    • Adds -rcode flag to enable DNS RCODE (status code) probing
    • Adds ts field to JSON output containing the request timestamp
    • Adds CIDR address support in input targets

    3 details in Everything

11. v1.0.4 Jun 2, 2021 · release notes

    dnsx v1.0.4 adds DNS Trace support via the new trace flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0.4 https://github.com/projectdiscovery/dnsx.git
    # already have the repo? check out this version:
    $ git checkout v1.0.4

    └──▷ USE IT
    Perform a full DNS trace lookup for a target domain.
    shell copy

    dnsx -domain example.com -trace

12. v1.0.1 Nov 17, 2020 · release notes

    dnsx v1.0.1 adds a stats flag for periodic scan progress monitoring

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0.1 https://github.com/projectdiscovery/dnsx.git
    # already have the repo? check out this version:
    $ git checkout v1.0.1

    └──▷ TRY IT
    Monitor real-time progress of a DNS scan without waiting for it to finish.
    copy

    $ dnsx -d example.com -stats

    • Adds the stats flag to display scan information every 5 seconds during execution
    • Enables the stats feature on Windows platforms

    2 details in Everything