Available

Search posts

Hit-The-Dns

An open-source DNS reconnaissance tool written in Bash.

Contents
Repository

Hit-The-Dns (Beta)

Logo

Hit-The-Dns is a modern open-source DNS recon tool written in bash which will help you during the DNS recon similar to tools like subfinder or dnsenum.

Installation

text
wget https://raw.githubusercontent.com/juanbelin/Hit-The-Dns/refs/heads/main/hit-the-dns.sh
text
chmod +x hit-the-dns.sh

Example Usage

DNS Fuzzing

text
./hit-the-dns -d inlanefreight.htb -i 10.129.203.6 -w ~/seclists/Discovery/DNS/subdomains-top1million-110000.txt

https://github.com/user-attachments/assets/fa2420e5-3267-4568-bfa3-fc597894c4ba

DNS Fuzzing verbose mode

-v or --verbose in order to view fuzzing attempts.

text
./hit-the-dns -d test.com -i 10.129.203.6 -w ~/seclists/Discovery/DNS/subdomains-top1million-110000.txt -v

Checking dns.logs and following the next step

The dns.logs file will give you the next step in the recon (zone transfer attack) according with the subdmains that the tool has found during the fuzzing.

https://github.com/user-attachments/assets/5878ce49-a2e9-44aa-9bd7-5e5bfa3419fa

image

image

Usage

text
./hit-the-dns -d domain.com -i 10.10.2.15 -w /path/to/wordlist.txt <-v>
text
./hit-the-dns.sh
 █████   █████  ███   █████
░░███   ░░███  ░░░   ░░███
 ░███    ░███  ████  ███████
 ░███████████ ░░███ ░░░███░
 ░███░░░░░███  ░███   ░███
 ░███    ░███  ░███   ░███ ███
 █████   █████ █████  ░░█████
░░░░░   ░░░░░ ░░░░░    ░░░░░
              █████    █████                  ██████████   ██████   █████  █████████
             ░░███    ░░███                  ░░███░░░░███ ░░██████ ░░███  ███░░░░░███
             ███████   ░███████    ██████     ░███   ░░███ ░███░███ ░███ ░███    ░░░
            ░░░███░    ░███░░███  ███░░███    ░███    ░███ ░███░░███░███ ░░█████████
              ░███     ░███ ░███ ░███████     ░███    ░███ ░███ ░░██████  ░░░░░░░░███
              ░███ ███ ░███ ░███ ░███░░░      ░███    ███  ░███  ░░█████  ███    ░███
              ░░█████  ████ █████░░██████     ██████████   █████  ░░█████░░█████████
               ░░░░░  ░░░░ ░░░░░  ░░░░░░     ░░░░░░░░░░   ░░░░░    ░░░░░  ░░░░░░░░░
 [+] Usage:
	-d/--domain <domain> -w/--wordlist </path/to/wordlist> -i/--ip <IP>
	-v/--verbose = Verbose mode
	-h --> Show help panel

Hit-The-Dns with Dnsenum comparation

Some tools such as dnsemun does not always find the subdomains even if they exist in the DNS because of the way it implements threads and filters.

https://github.com/user-attachments/assets/f97bd939-7b29-42bb-829e-be0352a52af1

License

© 2025 juanbelin. All rights reserved.