DNS

Quick DNS collection and hunting pivots.

Resolve A records

dig +short A example.com

Resolve all common records

dig example.com ANY

Trace delegation

dig +trace example.com

Capture DNS traffic

sudo tcpdump -ni any port 53

Read DNS questions from a PCAP

tshark -r capture.pcap -Y dns -T fields -e frame.time -e ip.src -e dns.qry.name