Kali 信息采集

1.DNS枚举工具DNSenum

root@kali:~# dnsenum --enum www.cisco.com
Smartmatch is experimental at /usr/bin/dnsenum line 698.
Smartmatch is experimental at /usr/bin/dnsenum line 698.
dnsenum VERSION:1.2.4
Warning: can't load Net::Whois::IP module, whois queries disabled.
Warning: can't load WWW::Mechanize module, Google scraping desabled.

----- www.cisco.com -----

Host's addresses:
__________________

e2867.ca2.s.tl88.net. 19 IN A 221.194.155.132

Name Servers:
______________

Error: can't continue no NS record for www.cisco.com
root@kali:~#

2.DNS枚举工具fierce

root@kali:~# fierce -dns baidu.com
DNS Servers for baidu.com:
dns.baidu.com
ns2.baidu.com
ns7.baidu.com
ns4.baidu.com
ns3.baidu.com

Trying zone transfer first...
Testing dns.baidu.com
Request timed out or transfer not allowed.
Testing ns2.baidu.com
Request timed out or transfer not allowed.
Testing ns7.baidu.com
Request timed out or transfer not allowed.
Testing ns4.baidu.com
Request timed out or transfer not allowed.
Testing ns3.baidu.com
Request timed out or transfer not allowed.

Unsuccessful in zone transfer (it was worth a shot)
Okay, trying the good old fashioned way... brute force

Checking for wildcard DNS...
Nope. Good.
Now performing 2280 test(s)...
10.94.49.39 access.baidu.com
182.61.62.50 ad.baidu.com
10.26.109.19 admin.baidu.com
10.42.4.225 ads.baidu.com
157.255.77.113 af.baidu.com
123.125.114.87 af.baidu.com
10.99.87.18 asm.baidu.com
10.143.145.28 backup.baidu.com
10.42.4.177 bugs.baidu.com
10.23.250.58 build.baidu.com
10.180.113.175 cc.baidu.com
10.16.80.154 cc.baidu.com
220.181.107.211 cert.baidu.com
111.206.37.138 cf.baidu.com
10.46.11.136 check.baidu.com
106.120.159.243 ck.baidu.com
10.242.112.16 client.baidu.com
10.26.137.29 com.baidu.com
10.114.40.21 con.baidu.com
39.156.66.150 crm.baidu.com