namp -sn 10.10.0.0/24 --send-ip
### Examples ###
# 10.10.10.1-20 --> scan a range
# 10.10.10.2.1 10.10.2.2 --> scan 2 hosts same time
# 10.10.10.0/24 --> scan a network
No man's land
for i in {1..255}; do (ping -c 1 192.168.1.${i} | grep "bytes from" &); done
DNS Zone Transfer
dig
dig axfr @$nameserver $domain
host
host -l $domain $nameserver
nslookup
nslookup
> server domain.com
> ls -d domain.com
DNS Records
A --> Resolve a hostname or domain to an IPv4
AAAA --> Resolve a hostname or domain to an IPv6
NS --> reference to the domains nameserver
MX --> Resolves a domain to a mail server
CNAME --> Used for domain aliases
TXT --> Text record
HINFO --> Host information
SOA --> Domain authority
SRV --> Service records
PTR --> Resolves an IP address to a hostname
Port Scanning
It is recomanded to save the scans in a file. I usualy save this files in recon directory
