dnsx — A fast and multi-purpose DNS toolkit to run multiple DNS queries. Note: Input to `dnsx` needs to be

How to use the dnsx command: A fast and multi-purpose DNS toolkit to run multiple DNS queries. Note: Input to dnsx needs to be passed through stdin (pipe |) in some cases. See also: dig, dog, dnstracer. More information: <https://docs.projectdiscovery.io/opensource/dnsx/usage>.

dnsx — A fast and multi-purpose DNS toolkit to run multiple DNS queries. Note: Input to dnsx needs to be passed through stdin (pipe |) in some cases. See also: dig, dog, dnstracer. More information: <https://docs.projectdiscovery.io/opensource/dnsx/usage>.

Query the A record of a (sub)domain and show [re]sponse received:

echo {{example.com}} | dnsx -a {{[-re|-resp]}}

Query all the DNS records (A, AAAA, CNAME, NS, TXT, SRV, PTR, MX, SOA, AXFR, CAA):

dnsx <<< {{example.com}} -recon {{[-re|-resp]}}

Query a specific type of DNS record:

echo {{example.com}} | dnsx {{[-re|-resp]}} -{{a|aaaa|cname|ns|txt|srv|ptr|mx|soa|any|axfr|caa}}

Output response only (do not show the queried domain or subdomain):

echo {{example.com}} | dnsx {{[-ro|-resp-only]}}

Display raw response of a query, specifying resolvers to use and retry attempts for failures:

echo {{example.com}} | dnsx -{{debug|raw}} {{[-r|-resolver]}} {{1.1.1.1,8.8.8.8,...}} -retry {{number}}

Brute force DNS records using a placeholder:

dnsx {{[-d|-domain]}} {{FUZZ.example.com}} {{[-w|-wordlist]}} {{path/to/wordlist.txt}} {{[-re|-resp]}}

Brute force DNS records from a list of domains and wordlists, appending output to a file with no color codes:

dnsx {{[-d|-domain]}} {{path/to/domain.txt}} {{[-w|-wordlist]}} {{path/to/wordlist.txt}} {{[-re|-resp]}} {{[-o|-output]}} {{path/to/output.txt}} {{[-nc|-no-color]}}

Extract CNAME records for the given list of subdomains, with rate limiting DNS queries per second:

subfinder -silent {{[-d|-domain]}} {{example.com}} | dnsx -cname {{[-re|-resp]}} {{[-rl|-rate-limit]}} {{number}}

tldr-pages: common/dnsx