From 8316ae7314d6ebe7bca8d0cebbc20722aa250d34 Mon Sep 17 00:00:00 2001
From: Jacob Kraniak <113630934+jacob-kraniak@users.noreply.github.com>
Date: Sat, 7 Mar 2026 21:34:36 -0500
Subject: [PATCH] DNS Recon Tools: 2026-03-07 21:34:36
Affected files:
.obsidian/workspace.json
README.md
tools/security/pentest-recon-enum/web-dns-recon-tools.md
---
.obsidian/workspace.json | 20 ++---
README.md | 22 +----
.../pentest-recon-enum/web-dns-recon-tools.md | 85 +++++++++++++++++++
3 files changed, 96 insertions(+), 31 deletions(-)
create mode 100644 tools/security/pentest-recon-enum/web-dns-recon-tools.md
diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json
index 44f3f09..c2f0995 100644
--- a/.obsidian/workspace.json
+++ b/.obsidian/workspace.json
@@ -13,12 +13,12 @@
"state": {
"type": "markdown",
"state": {
- "file": "tools/security/pentest-recon-enum/pentest-arsenal.md",
- "mode": "preview",
+ "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "mode": "source",
"source": false
},
"icon": "lucide-file",
- "title": "pentest-arsenal"
+ "title": "web-dns-recon-tools"
}
}
]
@@ -94,7 +94,7 @@
"state": {
"type": "backlink",
"state": {
- "file": "tools/security/pentest-recon-enum/pentest-arsenal.md",
+ "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
"collapseAll": false,
"extraContext": false,
"sortOrder": "alphabetical",
@@ -104,7 +104,7 @@
"unlinkedCollapsed": true
},
"icon": "links-coming-in",
- "title": "Backlinks for pentest-arsenal"
+ "title": "Backlinks for web-dns-recon-tools"
}
},
{
@@ -113,12 +113,12 @@
"state": {
"type": "outgoing-link",
"state": {
- "file": "tools/security/pentest-recon-enum/pentest-arsenal.md",
+ "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
"linksCollapsed": false,
"unlinkedCollapsed": true
},
"icon": "links-going-out",
- "title": "Outgoing links from pentest-arsenal"
+ "title": "Outgoing links from web-dns-recon-tools"
}
},
{
@@ -156,13 +156,13 @@
"state": {
"type": "outline",
"state": {
- "file": "tools/security/pentest-recon-enum/pentest-arsenal.md",
+ "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
"followCursor": false,
"showSearch": false,
"searchQuery": ""
},
"icon": "lucide-list",
- "title": "Outline of pentest-arsenal"
+ "title": "Outline of web-dns-recon-tools"
}
},
{
@@ -197,6 +197,7 @@
"active": "9b2e89c682f5d2ef",
"lastOpenFiles": [
"README.md",
+ "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
"tools/security/pentest-recon-enum/pentest-arsenal.md",
"tools/INDEX.md",
"SOP-Navigation-and-Layout.md",
@@ -222,7 +223,6 @@
"tools/sysadmin-devops/Remote Access + SSH Clients.md",
"tools/network-engineering/dns-dhc-ipam/dns-tools.md",
"tools/tools - (migrate out)/gui-tools.md",
- "tools/tools - (migrate out)/web-tools.md",
"documentation/manuals-howtos-guides",
"documentation",
"tools/security/hardening-compliance",
diff --git a/README.md b/README.md
index a5ab3de..e658a94 100644
--- a/README.md
+++ b/README.md
@@ -287,27 +287,7 @@ All tool-list markdown files follow the structure and linking rules defined in [
##### :black_small_square: DNS
-
- ViewDNS - one source for free DNS related tools and information.
- DNSLookup - is an advanced DNS lookup tool.
- DNSlytics - online DNS investigation tool.
- DNS Spy - monitor, validate and verify your DNS configurations.
- Zonemaster - helps you to control how your DNS works.
- Leaf DNS - comprehensive DNS tester.
- Find subdomains online - find subdomains for security assessment penetration test.
- DNSdumpster - dns recon & research, find & lookup dns records.
- DNS Table online - search for DNS records by domain, IP, CIDR, ISP.
- intoDNS - DNS and mail server health checker.
- DNS Bajaj - check the delegation of your domain.
- BuddyDNS Delegation LAB - check, trace and visualize delegation of your domain.
- dnssec-debugger - DS or DNSKEY records validator.
- PTRarchive.com - this site is responsible for the safekeeping of historical reverse DNS records.
- xip.io - wildcard DNS for everyone.
- nip.io - dead simple wildcard DNS for any IP Address.
- dnslookup (ceipam) - one of the best DNS propagation checker (and not only).
- What's My DNS - DNS propagation checking tool.
- DNSGrep - quickly searching large DNS datasets.
-
+
##### :black_small_square: Mail
diff --git a/tools/security/pentest-recon-enum/web-dns-recon-tools.md b/tools/security/pentest-recon-enum/web-dns-recon-tools.md
new file mode 100644
index 0000000..3d1777a
--- /dev/null
+++ b/tools/security/pentest-recon-enum/web-dns-recon-tools.md
@@ -0,0 +1,85 @@
+# Online DNS & Subdomain Recon Tools
+
+Collection of **web-based / online** DNS tools useful during the reconnaissance phase of penetration testing and security assessments.
+
+These tools focus on:
+- DNS record lookups and analysis
+- Subdomain enumeration
+- DNS propagation checking
+- Delegation and DNSSEC validation
+- Historical reverse DNS records
+- Wildcard / testing DNS services
+
+They complement CLI-based recon tools (see [pentest-arsenal.md](./pentest-arsenal.md)) and are ideal for quick, passive OSINT without local installation.
+
+[↑ Back to Pentest Recon & Enum INDEX](./INDEX.md)
+[↑ Back to Tools Overview](../../_INDEX.md)
+
+
+Core DNS Lookup & Investigation Tools
+
+### Core DNS Lookup & Investigation Tools
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-----------------------|---------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
+| ViewDNS | [viewdns.info](https://viewdns.info/) | — | Multi-tool suite offering DNS, WHOIS, reverse IP, propagation, traceroute and more. | [dns, recon, lookup, propagation, osint] | — | ~2008 | — |
+| DNSLookup | [dnslookup.org](https://dnslookup.org/) | — | Advanced DNS lookup tool with detailed record parsing and visualization. | [dns, lookup, records, analysis] | — | ~2015 | — |
+| DNSlytics | [dnslytics.com](https://dnslytics.com/) | — | Online DNS and IP investigation platform with historical data and maps. | [dns, investigation, intel, osint] | — | ~2016 | — |
+| DNS Spy | [dnsspy.io](https://dnsspy.io/) | — | Monitors DNS configurations, detects changes, and validates settings. | [dns, monitor, validation, config] | — | ~2017 | — |
+| Zonemaster | [zonemaster.iis.se](https://zonemaster.iis.se/en/) | — | Advanced DNS zone testing tool to verify configuration and best practices. | [dns, tester, zone, validation] | — | ~2013 | — |
+| Leaf DNS | [leafdns.com](http://leafdns.com/) | — | Comprehensive DNS health and delegation tester. | [dns, tester, health, delegation] | — | ~2010 | — |
+| intoDNS | [intodns.com](https://intodns.com/) | — | Checks DNS and mail server health, misconfigurations, and common issues. | [dns, health, checker, mail] | — | ~2009 | — |
+
+
+
+
+Subdomain Enumeration & DNS Recon
+
+### Subdomain Enumeration & DNS Recon
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-----------------------|---------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
+| Find Subdomains Online | [findsubdomains.com](https://findsubdomains.com/) | — | Web interface to discover subdomains for security assessments and pentests. | [subdomain, enum, recon, osint] | — | ~2018 | — |
+| DNSdumpster | [dnsdumpster.com](https://dnsdumpster.com/) | — | Free DNS recon & research tool; maps hosts, subdomains, and records. | [dns, recon, subdomain, dump] | — | ~2014 | — |
+| DNS Table | [dnstable.com](https://dnstable.com/) | — | Searches public DNS records by domain, IP, CIDR block, or ISP. | [dns, search, records, database] | — | ~2015 | — |
+
+
+
+
+DNS Propagation & Delegation Checkers
+
+### DNS Propagation & Delegation Checkers
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|--------------------------|--------------------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
+| What's My DNS | [whatsmydns.net](https://www.whatsmydns.net/) | — | Popular global DNS propagation checker from hundreds of locations worldwide. | [propagation, checker, dns, global] | — | ~2012 | — |
+| dnslookup (ceipam) | [ceipam.eu/en/dnslookup.php](https://ceipam.eu/en/dnslookup.php) | — | Excellent DNS propagation checker with detailed global views and extras. | [propagation, checker, dns, global] | — | ~2015 | — |
+| BuddyDNS Delegation LAB | [buddyns.com/delegation-lab](https://www.buddyns.com/delegation-lab/) | — | Visualizes, traces, and validates domain name delegation paths. | [dns, delegation, trace, visualize] | — | ~2012 | — |
+| DNS Bajaj | [zonecut.net/dns](http://www.zonecut.net/dns/) | — | Simple delegation checker showing authoritative name servers. | [dns, delegation, checker] | — | ~2005 | — |
+| DNSSEC Debugger | [dnssec-debugger.verisignlabs.com](https://dnssec-debugger.verisignlabs.com/) | — | Validates DNSSEC chain, DS, and DNSKEY records. | [dnssec, validation, debugger] | — | ~2010 | — |
+
+
+
+
+Historical & Wildcard DNS Services
+
+### Historical & Wildcard DNS Services
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|---------------|----------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
+| PTRarchive | [ptrarchive.com](http://ptrarchive.com/) | — | Archives and searches historical reverse DNS (PTR) records. | [ptr, historical, reverse, archive] | — | ~2010 | — |
+| xip.io | [xip.io](http://xip.io/) | — | Free wildcard DNS service resolving to any IP (great for local/dev testing). | [wildcard, dns, testing, local] | — | 2011 | — |
+| nip.io | [nip.io](https://nip.io/) | — | Dead-simple wildcard DNS for any IP address (modern xip.io alternative). | [wildcard, dns, testing, local] | — | ~2014 | — |
+
+
+
+
+Advanced / Specialized DNS Tools
+
+### Advanced / Specialized DNS Tools
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-----------|--------------------------------------------------------------------------------|-------------|----------------------------------------------------------------------------------|-----------------------------------------------|---------------|---------------|-------|
+| DNSGrep | [blog.erbbysam.com/.../dnsgrep](https://blog.erbbysam.com/index.php/2019/02/09/dnsgrep/) | — | Command-line style search across large public DNS datasets (web interface). | [dns, search, grep, datasets] | — | 2019 | — |
+
+