VulnScanners Logo

Recon & OSINT

dnsx

Fast, multi-purpose DNS toolkit for resolution and probing.

dnsrecon
dnsx — terminal
$ subfinder -d example.com | dnsx -resp

What it does

dnsx runs fast, configurable DNS queries across many resolvers to validate subdomains, pull records, and probe at scale. It's commonly piped after subdomain discovery to keep only live hosts.

Common use cases

  • •Validate and filter subdomains after a large passive enumeration round.
  • •Extract specific record types — A, AAAA, CNAME, TXT — across thousands of hosts.
  • •Health-check internal DNS infrastructure by testing resolution from multiple resolvers.

Key features

  • •Runs queries against hundreds of concurrent resolvers for speed.
  • •Supports A, AAAA, CNAME, MX, NS, SOA, TXT, and SPF record lookups.
  • •Pipes naturally after subfinder, assetfinder, or any subdomain list.
  • •Outputs JSON, CSV, or stdout for downstream tooling.

Source

https://github.com/projectdiscovery/dnsx ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.theHarvesterEmail, subdomain, and host OSINT gathering.MetagoofilMetadata extraction from public documents.

Need hosted scanning instead of local tooling?

Run a scan in the browser →