Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- What is the main purpose of dnsenum in cybersecurity?
a. To encrypt DNS traffic
b. To enumerate DNS information about a domain
c. To break into DNS servers
d. To block DNS requests
Answer: b. To enumerate DNS information about a domainhacking-notes+2 - Which programming language is dnsenum primarily written in?
a. Python
b. Ruby
c. Perl
d. Bash
Answer: c. Perllinkedin+2 - What type of record does dnsenum retrieve to identify the main IP address of a domain?
a. MX
b. NS
c. A
d. TXT
Answer: c. Akali - Which dnsenum feature attempts to get a complete list of DNS records through misconfigured nameservers?
a. Google scraping
b. Zone Transfer
c. Subdomain brute-force
d. Reverse Lookup
Answer: b. Zone Transferhacking-notes+1 - dnsenum can perform brute-force enumeration to discover which of the following?
a. Admin passwords
b. Subdomains
c. SSL certificates
d. Open ports
Answer: b. Subdomainslinkedin+2 - What does the “MX” record listed by dnsenum represent?
a. Mail exchange server
b. Media exchange server
c. Main external server
d. Memory expansion
Answer: a. Mail exchange serverkali - Which flag in dnsenum is used to provide a custom wordlist for subdomain brute-forcing?
a. -o
b. -f
c. -h
d. -p
Answer: b. -fawjunaid+1 - Which of the following describes a “Reverse Lookup” performed by dnsenum?
a. IP address to domain name resolution
b. Domain name to IP address mapping
c. Decrypting encrypted DNS records
d. Gathering TLS certificates
Answer: a. IP address to domain name resolutionawjunaid+1 - Which dnsenum option disables reverse lookup for faster scans?
a. –threads
b. –enum
c. –noreverse
d. –subfile
Answer: c. –noreverseawjunaid+1 - What is the default output format when saving dnsenum results with -o?
a. CSV
b. XML
c. JSON
d. TXT
Answer: b. XMLkali+1 - What is the primary use-case for dnsenum in penetration testing?
a. Password cracking
b. Malware analysis
c. Mapping DNS structure
d. Wi-Fi auditing
Answer: c. Mapping DNS structurehacking-notes+2 - What does the “NS” record obtained by dnsenum reveal?
a. Network segment
b. Name server
c. New subdomain
d. None of the above
Answer: b. Name serverkali - Which command would perform a basic scan using dnsenum?
a. dnsenum -h
b. dnsenum <domain>
c. dnsenum -t
d. dnsenum -s
Answer: b. dnsenum <domain>hacking-notes+1 - What does the –enum option in dnsenum do?
a. Enables enumeration shortcut
b. Encrypts DNS data
c. Skips scanning
d. Increases verbosity only
Answer: a. Enables enumeration shortcutkali - In which phase of a penetration test is dnsenum typically used?
a. Information gathering
b. Exploitation
c. Privilege escalation
d. Covering tracks
Answer: a. Information gatheringlinkedin+1 - dnsenum is best suited for which kind of testing?
a. Physical security testing
b. Web application pentesting
c. Network reconnaissance
d. Mobile app security
Answer: c. Network reconnaissancehacking-notes+1 - Which record retrieved by dnsenum contains email server information?
a. NS
b. CNAME
c. MX
d. PTR
Answer: c. MXlinkedin+1 - What flag sets the number of threads for faster enumeration in dnsenum?
a. –enum
b. –noreverse
c. –threads
d. –subfile
Answer: c. –threadsawjunaid+1 - Which of the following is NOT a capability of dnsenum?
a. Enumeration of A records
b. Retrieval of MX and NS records
c. Email credential brute-force
d. Subdomain brute-force
Answer: c. Email credential brute-forcehacking-notes+1 - What is required to use dnsenum legally on a domain?
a. Paid license
b. Physical access
c. Proper authorization
d. No requirement
Answer: c. Proper authorizationawjunaid+1 - Which output file will store discovered IP blocks in dnsenum?
a. domain_txt.txt
b. domain_ips.txt
c. output_ip.txt
d. dns_results.txt
Answer: b. domain_ips.txtsystemweakness+1 - Which scripting feature allows dnsenum to discover subdomains recursively?
a. -h
b. -r
c. -w
d. -n
Answer: b. -rawjunaid+1 - dnsenum can gather extra names and subdomains using which method?
a. Social engineering
b. Google scraping
c. Port scanning
d. Packet sniffing
Answer: b. Google scrapingsystemweakness+1 - Which flag writes all valid subdomains to a specific file in dnsenum?
a. –subfile
b. –enum
c. –threads
d. –delay
Answer: a. –subfilekali - What does DNS stand for in dnsenum?
a. Digital Network Service
b. Domain Name System
c. Data Node Security
d. Domain Network Structures
Answer: b. Domain Name Systemrecordedfuture+2 - Which of the following is a dependency for dnsenum?
a. Nmap
b. perl
c. Python3
d. Bash
Answer: b. perlhacking-notes+1 - dnsenum saves valid subdomain names into which file format by default?
a. JSON
b. XML
c. TXT
d. CSV
Answer: b. XMLawjunaid+1 - Which feature in dnsenum tries to discover the BIND version running on a nameserver?
a. Subdomain brute-force
b. AXFR queries
c. Zone update
d. Reverse lookup
Answer: b. AXFR queriessystemweakness+1 - Which of these is NOT an output of dnsenum?
a. Hostnames
b. Password hashes
c. IP Addresses
d. Zone transfers
Answer: b. Password hasheskali+1 - Which dnsenum version is commonly installed by default in Kali Linux repositories?
a. 0.1
b. 1.3.1
c. 2.5
d. 5.0
Answer: b. 1.3.1kali - Brute-forcing subdomains in dnsenum requires which input?
a. Subnet mask
b. Wordlist file
c. Hash value
d. Log file
Answer: b. Wordlist fileawjunaid+1 - dnsenum’s –whois option performs whois queries on which type of network ranges?
a. IPv4 only
b. C class network
c. VPC blocks
d. FQDN ranges
Answer: b. C class networksystemweakness+1 - What is one way dnsenum helps defenders?
a. Patch vulnerabilities
b. Map and secure DNS infrastructure
c. Disable DNS records
d. Encrypt network traffic
Answer: b. Map and secure DNS infrastructurerecordedfuture+1 - Which of these DNS records is NOT typically obtained by dnsenum?
a. TXT
b. MX
c. A
d. MAC
Answer: d. MACkali - Where can the official project and source code for dnsenum be found?
a. Github
b. Google Play
c. Facebook
d. Snap Store
Answer: a. Githubgithub+1 - Which DNS record type is used to map hostnames to IP addresses?
a. A record
b. MX record
c. CNAME record
d. NS record
Answer: a. A recordkali - What step is advisable before using dnsenum on an organization’s domain?
a. Email the admin
b. Obtain written permission
c. Change DNS records first
d. Modify zone files
Answer: b. Obtain written permissionhacking-notes+1 - Which of the following is an example of a command to brute-force subdomains with dnsenum?
a. dnsenum –brute domain.com
b. dnsenum -f wordlist.txt domain.com
c. dnsenum -b wordlist.txt
d. dnsenum -p domain.com
Answer: b. dnsenum -f wordlist.txt domain.comawjunaid+1 - dnsenum supports multithreading for what purpose?
a. Skipping slow queries
b. Faster enumeration
c. Encrypted results
d. GUI interface
Answer: b. Faster enumerationsystemweakness+2 - Which is NOT a function performed by dnsenum?
a. Subdomain enumeration
b. Zone transfer exploits
c. Email phishing
d. Google scraping
Answer: c. Email phishingsystemweakness+1 - What is an AXFR in the context of dnsenum?
a. A security protocol
b. DNS zone transfer request
c. Encryption method
d. Data storage format
Answer: b. DNS zone transfer requestsystemweakness+1 - dnsenum is part of which popular Linux security distribution by default?
a. Ubuntu Server
b. Debian
c. Kali Linux
d. Fedora
Answer: c. Kali Linuxsystemweakness+1 - What does the –private flag enable in dnsenum?
a. Private DNS query only
b. Display of private IP addresses found
c. Hides all output
d. Output only to console
Answer: b. Display of private IP addresses foundawjunaid - Which option would store valid subdomains to a specific file in plain text?
a. –subfile
b. –private
c. –noreverse
d. –delay
Answer: a. –subfilekali - What is the typical role of dnsenum in red team assessments?
a. Defense
b. Stealth persistence
c. Reconnaissance
d. Malware analysis
Answer: c. Reconnaissancelinkedin+1 - When would the –nocolor option be useful in dnsenum?
a. When color output is unsupported
b. To encrypt the output
c. To save private IPs
d. To perform zone transfers
Answer: a. When color output is unsupportedkali - Which record type is commonly found by dnsenum for mail delivery?
a. MX
b. HINFO
c. PTR
d. TXT
Answer: a. MXlinkedin+1 - In security audits, why is enumeration with dnsenum important?
a. To build a network map
b. To disallow DNS usage
c. To change user passwords
d. To debug hardware
Answer: a. To build a network maprecordedfuture+2 - Which best describes dnsenum’s Google scraping feature?
a. Scrapes login details
b. Finds extra subdomains via Google searches
c. Blocks search engine bots
d. Encrypts DNS traffic
Answer: b. Finds extra subdomains via Google searchessystemweakness+1 - What can dnsenum help reveal if a DNS server is misconfigured?
a. All DNS records for a domain
b. SSL keys
c. Admin credentials
d. Device driver versions
Answer: a. All DNS records for a domainhacking-notes+1
- https://www.hacking-notes.com/RedTeam/1.Information-Gathering/2.Active-Reconnaissance/DNSenum
- https://www.linkedin.com/posts/rakesh-joshi-119302215_dnsenum-is-a-perl-based-command-line-tool-activity-7325577574661668864-IqSj
- https://www.kali.org/tools/dnsenum/
- https://awjunaid.com/ethical-hacking/dnsenum-multithreaded-tool-for-dns-enumeration/
- https://systemweakness.com/dnsenum-sublist3r-findomain-and-massdns-tofor-dns-enumeration-b81ced20c5e6
- https://www.recordedfuture.com/threat-intelligence-101/tools-and-techniques/dns-enumeration
- https://github.com/fwaeytens/dnsenum
- https://hackzone.in/blog/dnsenum-step-by-step-guide/
- https://www.hackercoolmagazine.com/complete-guide-to-dnsenum/
- https://labex.io/tutorials/nmap-enumerate-dns-in-dnsenum-549936
- https://github.com/theMiddleBlue/DNSenum
- https://forum.hackthebox.com/t/hack-the-box-academy-footprinting-dns-enumeration/250408
- https://www.infosecinstitute.com/resources/penetration-testing/dns-enumeration-techniques-in-linux/
- https://www.youtube.com/watch?v=hK65WeRPqeQ
- https://www.oreilly.com/library/view/web-penetration-testing/9781788623377/69a5a267-6a61-45a8-b19b-1f2de783cdda.xhtml
- https://www.oreilly.com/library/view/learn-kali-linux/9781789611809/62aaaf63-d151-4b6d-a566-a3e22d4267f5.xhtml
- https://www.edureka.co/community/289791/what-commands-used-perform-enumeration-discover-subdomains
- https://www.youtube.com/watch?v=tOsYWvx10sk
- https://www.examtopics.com/discussions/comptia/view/311268-exam-pt0-003-topic-1-question-98-discussion/
- https://www.geeksforgeeks.org/ethical-hacking/what-is-dns-enumeration/