DNS Enumeration
- host <website>
- host -t mx <domain>
- Forward Lookup bruteforce
for ip in $(cat list.txt); do host $ip.megacorpone.com; done
where list.txt has all subdomain
- Forward Lookup bruteforce
for ip in $(seq 50 100); do host 38.100.193.$ip; done | grep -v "not found”