# darkoperator/dnsrecon

DNS Enumeration Script

Repository: https://github.com/darkoperator/dnsrecon
Canonical: https://ross.abutalabs.com/products/dnsrecon
Language: Python
License: GPL-2.0
License Family: copyleft
Last push: 2026-08-17T05:51:22+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 78, longevity 100
- inputs: {"age_days": 5739, "days_push": 16, "days_rel": 66, "gap_med": 36.0, "n_releases_24m": 11}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3061, forks 578 (observed 2026-08-28T04:07:41.174783+00:00)

## What it is
DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, general record enumeration, SRV and TLD expansion, subdomain brute forcing, PTR lookups, cache snooping, and optional Shodan netblock enrichment via CLI or a bundled REST API.

## Use cases
- enumerate DNS records for a domain
- check if a zone transfer is possible on nameservers
- brute force subdomains with a wordlist
- perform reverse DNS lookups on an IP range or CIDR
- expand TLDs and check wildcard resolution
- enrich enumeration results with Shodan netblock data
- run DNS recon through a REST API

## When to choose
- you need a scriptable, comprehensive DNS enumeration tool during a security assessment
- you want passive and active DNS recon including brute forcing and cache snooping
- you want Shodan-enriched netblock expansion from SPF and WHOIS data

## When to avoid
- you need a GUI-driven reconnaissance platform rather than a CLI tool
- you only need a quick single DNS lookup rather than full enumeration
- you require a tool that runs on Python versions older than 3.12

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, cli, web-scraping
- domain: security, penetration-testing, networking, osint
- platform: python, cli, windows, cross-platform
- tags: dns-enumeration, dns-recon, zone-transfer, subdomain-bruteforce, reconnaissance, shodan-integration, rest-api, command-line, linux, macos

## Member repositories
- darkoperator/dnsrecon (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:41.174783+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:28:19.655558+00:00, confidence not recorded.
  - readme: https://github.com/darkoperator/dnsrecon (fetched 2026-08-28T04:07:41.174783+00:00, sha a1d029f87658)
- Data as of 2026-08-30T08:39:29.467469+00:00.