dnsenum

root@kali:~# dnsenum qq.com
dnsenum VERSION:1.2.6

----- qq.com -----

Host‘s addresses: #主机地址
__________________

qq.com. 5 IN A 183.3.226.35
qq.com. 5 IN A 61.129.7.47
qq.com. 5 IN A 123.151.137.18

Name Servers: #域名服务器
______________

ns3.qq.com. 5 IN A 112.60.1.69
ns3.qq.com. 5 IN A 183.192.201.116
ns4.qq.com. 5 IN A 58.144.154.100
ns4.qq.com. 5 IN A 125.39.46.125
ns4.qq.com. 5 IN A 203.205.221.79
ns2.qq.com. 5 IN A 203.205.177.41
ns2.qq.com. 5 IN A 121.51.160.100
ns2.qq.com. 5 IN A 123.151.66.78
ns1.qq.com. 5 IN A 157.255.246.101
ns1.qq.com. 5 IN A 183.3.226.207
ns1.qq.com. 5 IN A 101.89.19.165

Mail (MX) Servers:  #邮件服务器
___________________

mx2.qq.com. 5 IN A 113.96.208.206
mx3.qq.com. 5 IN A 58.251.110.111
mx1.qq.com. 5 IN A 113.96.208.206

Trying Zone Transfers and getting Bind Versions: 

#尝试在在区域传输中获取BIND（Berkeley Internet Name Domain）版本信息
_________________________________________________


Trying Zone Transfer for qq.com on ns3.qq.com ...
AXFR record query failed: REFUSED

Trying Zone Transfer for qq.com on ns4.qq.com ...
AXFR record query failed: REFUSED

Trying Zone Transfer for qq.com on ns2.qq.com ...
AXFR record query failed: REFUSED

Trying Zone Transfer for qq.com on ns1.qq.com ...
AXFR record query failed: REFUSED

Brute forcing with /usr/share/dnsenum/dns.txt: #从dns.txt文件中读取子域名进行猜测可能存在的子域名
_______________________________________________

11.qq.com. 5 IN CNAME 0.0.0.1.
25.qq.com. 5 IN A 0.0.0.1
33.qq.com. 5 IN A 0.0.0.1
...

...