DNSRecon is a Python script written by Carlos Perez for conducting DNS reconnaissance. It can enumerate general DNS records, perform zone transfers, perform reverse lookups, and brute-force subdomains among other functions. It will even perform Google scanning, automating the process we discussed in the Using Google to find subdomains section. To see usage information for dnsrecon, run the following command from within the /usr/share/dnsrecon directory:

dnsrecon -h