> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/pt-br/hacking-tools/enumeration/dns-enumeration.md).

# Enumeração DNS

Notas de ferramentas para enumeração DNS para descoberta passiva de DNS, enumeração de subdomínios, registros DNS, verificação de transferência de zona, dnsrecon, dnsenum, DNSDumpster, brute force, descoberta de hosts e fluxo de reconhecimento.

A enumeração de DNS identifica domínios, subdomínios, registros, servidores de nomes, zonas expostas e indícios de infraestrutura antes de uma varredura mais aprofundada. Use primeiro fontes passivas e, depois, valide os achados com consultas DNS ativas e força bruta controlada quando o escopo do teste permitir.

## Fluxo de Trabalho de Enumeração de DNS

1. Coleta dados passivos de DNS de fontes públicas e conjuntos de dados de transparência de certificados.
2. Consulte registros comuns como A, AAAA, CNAME, MX, TXT, NS, SOA e SRV.
3. Verifique a exposição de transferência de zona com servidores de nomes autorizados.
4. Faça força bruta em subdomínios somente quando as regras de engajamento permitirem a descoberta ativa.
5. Resolva os hosts descobertos e encaminhe os alvos confirmados para a varredura de portas e a análise de perfil da web.

## Ferramentas de DNS

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>Nome</th><th>Descrição</th><th>Link oficial</th><th data-hidden data-card-cover data-type="image">Imagem de capa</th></tr></thead><tbody><tr><td><strong>DNSDumpster</strong></td><td>Descoberta passiva de registros DNS e subdomínios.</td><td><a href="https://dnsdumpster.com/">https://dnsdumpster.com/</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-075a81b392cd7f201128689be1c5e50c045253ed%2Fimage.png?alt=media">image.png</a></td></tr><tr><td><strong>dnsrecon</strong></td><td>Enumeração de DNS, transferências de zona e força bruta de subdomínios.</td><td><a href="https://github.com/darkoperator/dnsrecon">https://github.com/darkoperator/dnsrecon</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-18b7d6e02adf179685d2cf2621e75ebbb098ca40%2Fimage.png?alt=media">image.png</a></td></tr><tr><td><strong>dnsenum</strong></td><td>Força bruta de DNS e coleta de informações de domínio.</td><td><a href="https://github.com/fwaeytens/dnsenum">https://github.com/fwaeytens/dnsenum</a></td><td><a href="https://783634792-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-6253d171f4c3d5591956eea6b99351a2ea5635a1%2Fimage.png?alt=media">image.png</a></td></tr></tbody></table>

## Fontes Passivas

| Recurso                                               | Descrição                                                                                           |
| ----------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
| [VirusTotal](https://www.virustotal.com/)             | Análise de URL, domínio, DNS passivo e relações de infraestrutura.                                  |
| [Censys](https://search.censys.io/)                   | Mecanismo de busca para hosts conectados à internet, certificados e serviços expostos.              |
| [crt.sh](https://crt.sh/)                             | Busca de Transparência de Certificados para descobrir nomes presentes em certificados TLS públicos. |
| [Project Sonar](https://sonar.omnisint.io/)           | Endpoints públicos para subdomínio, TLD e consulta reversa de DNS.                                  |
| [Netcraft SearchDNS](https://searchdns.netcraft.com/) | Busca pública de hostnames e inteligência de DNS.                                                   |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/pt-br/hacking-tools/enumeration/dns-enumeration.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.