DNSenum in Windows (manually)

 What

Using DNSenum in Windows

 Problem

DNSenum is written in perl, we could install perl in Windows but here is how the script does it.

 Solution

Let’s see how can we collect the same information about a domain manually in Windows without using tools like dnsenum. Get DNSenum script from: http://code.google.com/p/dnsenum/

Open a command line window.

1) Get the host address

nslookup -q=a

2) Get the nameservers

nslookup -q=ns

3) Get the MX record

nslookup -q=mx

4) Zone transfer
4.1) Enter nslookup with no arguments to enter interactive mode

nslookup

4.2) Choose your nameserver

server ns1.mynameserver.com

4.3) Choose for query type any

set type=any

4.4) Transfer

ls -d

5) Get extra names via google
5.1) Open your browser and navigate to Google search page to search for the following string

allinurl: -www site:

6) Perform whois queries
6.1) Download Whois for Windows – http://technet.microsoft.com/en-us/sysinternals/bb897435.aspx 6.2) In comand line window change your current directory to whois folder and execute the following command:

whois <domain name>