{"id":21205,"date":"2025-11-09T09:06:39","date_gmt":"2025-11-09T08:06:39","guid":{"rendered":"https:\/\/linux-bibel.at\/?p=21205"},"modified":"2025-11-09T09:12:57","modified_gmt":"2025-11-09T08:12:57","slug":"dnsenum-maximale-informationen-ueber-eine-domain-unter-linux","status":"publish","type":"post","link":"https:\/\/linux-bibel.at\/index.php\/2025\/11\/09\/dnsenum-maximale-informationen-ueber-eine-domain-unter-linux\/","title":{"rendered":"dnsenum &#8211; Maximale Informationen \u00fcber eine Domain unter Linux"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hin und wieder ist es n\u00fctzlich, Informationen \u00fcber eine Domain zu bekommen. Manchmal, weil man Spam auf der Spur ist, mal, weil man herausfinden will, was man \u00fcber seine eigene Domain herausfinden kann. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Einiges bekommt man unter Linux schon mit Standard-Mitteln heraus, mit dnsenum holt man jedoch alles M\u00f6gliche \u00fcber eine Domain heraus, was \u00fcber deren Infrastruktur zu finden ist.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">dnsenum installieren<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Unter auf Debian basierenden Linux-Distributionen installieren Sie diese Software wie \u00fcblich ganz einfach \u00fcber die Paket-Verwaltung durch das Paket &#8222;<strong>dnsenum<\/strong>&#8222;. Am schnellsten als root auf dem Terminal:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt update\napt install dnsenum<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Findet sich das Paket nicht in den Repositorys Ihrer genutzten Distribution, finden Sie dieses Perl-Script auch auf <a href=\"https:\/\/github.com\/fwaeytens\/dnsenum\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">dnsenum nutzen<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Die Software wird als normaler Benutzer auf dem Terminal genutzt, als Option geben Sie ganz einfach die Domain an, \u00fcber die Sie n\u00e4here Informationen ben\u00f6tigen. Also etwa:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dnsenum google.com<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Im Beispiel der folgenden Ausgabe wurde eine andere Domain genutzt, da die Ausgabe etwas k\u00fcrzer ist (<em>die Ausgabe wurde von mir minimal zensiert<\/em>):<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-scaled.jpg\" rel=\"lightbox-0\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-1024x640.jpg\" alt=\"\" class=\"wp-image-21213\" srcset=\"https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-1024x640.jpg 1024w, https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-1536x960.jpg 1536w, https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-2048x1280.jpg 2048w, https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-150x94.jpg 150w, https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-300x188.jpg 300w, https:\/\/linux-bibel.at\/wp-content\/uploads\/2025\/11\/dnsenum-2-768x480.jpg 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Die Ausgabe ist noch um einiges l\u00e4nger, sehen wir uns gleich im Textformat an (<em>xxx wurde von mir zensiert<\/em>):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u276f dnsenum xxx.at\ndnsenum VERSION:1.3.1\n\n-----   xxx.at   -----\n\n\nHost's addresses:\n__________________\n\nxxx.at.                          4709     IN    A        194.116.xxx.xx\n\n\nName Servers:\n______________\n\nbalancer1.xxx.at.                3391     IN    A        194.116.xxx.xxx\nsec1.rcode0.net.                         44645    IN    A        192.174.xxx.xxx\nns.mail.at.                              75485    IN    A        80.245.xxx.xxx\nsec2.rcode0.net.                         44645    IN    A        176.97.xxx.xxx\n\n\nMail (MX) Servers:\n___________________\n\nxxx-at.mail.protection.outlook.com. 10       IN    A        52.101.xxx.xxx\nxxx-at.mail.protection.outlook.com. 10       IN    A        52.101.xxx.xxx\nxxx-at.mail.protection.outlook.com. 10       IN    A        52.101.xxx.xxx\nxxx-at.mail.protection.outlook.com. 10       IN    A        52.101.xxx.xxx\n\n\nTrying Zone Transfers and getting Bind Versions:\n_________________________________________________\n\n\nTrying Zone Transfer for xxx.at on balancer1.xxx.at ... \nAXFR record query failed: REFUSED\n\nTrying Zone Transfer for xxx.at on sec1.rcode0.net ... \nAXFR record query failed: corrupt packet\n\nTrying Zone Transfer for xxx.at on ns.mail.at ... \nAXFR record query failed: REFUSED\n\nTrying Zone Transfer for xxx.at on sec2.rcode0.net ... \nAXFR record query failed: corrupt packet\n\n\nBrute forcing with \/usr\/share\/dnsenum\/dns.txt:\n_______________________________________________\n\nabout.xxx.at.                    2064     IN    CNAME    dlb36und4vxas.cloudfront.net.\ndlb36und4vxas.cloudfront.net.            60       IN    A        18.66.xxx.xxx\ndlb36und4vxas.cloudfront.net.            60       IN    A        18.66.xxx.xxx\ndlb36und4vxas.cloudfront.net.            60       IN    A        18.66.xxx.xxx\ndlb36und4vxas.cloudfront.net.            60       IN    A        18.66.xxx.xxx\napps.xxx.at.                     2505     IN    A        194.116.xxx.xxx\nautodiscover.xxx.at.             7200     IN    A        194.116.xxx.xxx\ndev.xxx.at.                      7200     IN    A        194.116.xxx.xxx\nftp.xxx.at.                      7200     IN    A        193.154.xxx.xxx\nintern.xxx.at.                   7200     IN    A        194.116.xxx.xxx\njobs.xxx.at.                     1101     IN    CNAME    d6tre4tjuscrm.cloudfront.net.\nd6tre4tjuscrm.cloudfront.net.            33       IN    A        99.84.xxx.xxx\nd6tre4tjuscrm.cloudfront.net.            33       IN    A        99.84.xxx.xxx\nd6tre4tjuscrm.cloudfront.net.            33       IN    A        99.84.xxx.xxx\nd6tre4tjuscrm.cloudfront.net.            33       IN    A        99.84.xxx.xxx\nlive.xxx.at.                     226      IN    A        194.116.xxx.xxx\nmail.xxx.at.                     7200     IN    A        194.116.xxx.xxx\nmail1.xxx.at.                    7200     IN    CNAME    thewall1.xxx.at.\nthewall1.xxx.at.                 7200     IN    A        193.154.xxx.xxx\nmail2.xxx.at.                    7200     IN    A        193.154.xxx.xxx\nmobile.xxx.at.                   7200     IN    A        194.116.xxx.xxx\norigin.xxx.at.                   7200     IN    A        194.116.xxx.xxx\nowa.xxx.at.                      7200     IN    A        194.116.xxx.xxx\nsecure.xxx.at.                   7200     IN    A        194.116.xxx.xxx\nstatic.xxx.at.                   7200     IN    A        194.116.xxx.xxx\nvpn.xxx.at.                      7200     IN    A        193.154.xxx.xxx\nvpn.xxx.at.                      7200     IN    A        194.116.xxx.xxx\nwww.xxx.at.                      3864     IN    CNAME    www.xxx.at.edgekey.net.\nwww.xxx.at.edgekey.net.          11008    IN    CNAME    e12972.dscb.akamaiedge.net.\ne12972.dscb.akamaiedge.net.              11       IN    A        104.96.xxx.xxx\n\n\nxxx.at class C netranges:\n__________________________________\n\n 193.154.xxx.0\/24\n 194.116.xxx.0\/24\n\n\nPerforming reverse lookup on 512 ip addresses:\n_______________________________________________\n\n33.214.xxx.xxx.in-addr.arpa.             86400    IN    PTR      fw-wlan.xxx.at.\n98.214.xxx.xxx.in-addr.arpa.             86400    IN    PTR      thewall1b.xxx.at.\n99.214.xxx.xxx.in-addr.arpa.             86400    IN    PTR      thewall2b.xxx.at.\n100.214.xxx.xxx.in-addr.arpa.            86400    IN    PTR      firewall2.xxx.at.\n116.214.xxx.xxx.in-addr.arpa.            86400    IN    PTR      mail.xxx.at.\n1.243.xxx.xxx.in-addr.arpa.              86400    IN    PTR      gw.xxx.at.\n9.243.xxx.xxx.in-addr.arpa.              86400    IN    PTR      silwall1.xxx.at.\n20.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      www.xxx.at.\n21.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      livestat.xxx.at.\n23.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      images.xxx.at.\n65.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      css.xxx.at.\n98.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      thewall1a.xxx.at.\n99.243.xxx.xxx.in-addr.arpa.             86400    IN    PTR      thewall2a.xxx.at.\n116.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      mail.xxx.at.\n241.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      balancer1.xxx.at.\n242.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      balancer2.xxx.at.\n243.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      xxx.xxx.at.\n244.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      balancer4.xxx.at.\n245.243.xxx.xxx.in-addr.arpa.            86400    IN    PTR      balancer5.xxx.at.\n\n19 results out of 512 IP addresses.\n\n\nxxx.at ip blocks:\n__________________________\n\n 193.154.xxx.33\/32\n 193.154.xxx.98\/31\n 193.154.xxx.100\/32\n 193.154.xxx.116\/32\n 194.116.xxx.1\/32\n 194.116.xxx.9\/32\n 194.116.xxx.20\/31\n 194.116.xxx.23\/32\n 194.116.xxx.65\/32\n 194.116.xxx.98\/31\n 194.116.xxx.116\/32\n 194.116.xxx.241\/32\n 194.116.xxx.242\/31\n 194.116.xxx.244\/31\n\ndone.<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Die Software holt sich also nicht nur Informationen \u00fcber die angegebene Domain, sondern auch alles, was sie zu dieser zugeh\u00f6rig findet. Und die Ausgabe ist hier von der Software selbst schon gek\u00fcrzt &#8211; hier hilft dann die Manpage weiter:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>man dnsenum<\/code><\/pre>\n<div class=\"pld-like-dislike-wrap pld-custom\">\r\n    <div class=\"pld-like-wrap  pld-common-wrap\">\r\n    <a href=\"javascript:void(0)\" class=\"pld-like-trigger pld-like-dislike-trigger  \" title=\"Gef\u00e4llt mir\" data-post-id=\"21205\" data-trigger-type=\"like\" data-restriction=\"cookie\" data-already-liked=\"0\">\r\n                            <img src=\"https:\/\/linux-bibel.at\/wp-content\/uploads\/2023\/12\/Daumen-Hoch.png\" alt=\"Gef\u00e4llt mir\" \/>\r\n            <\/a>\r\n    <span class=\"pld-like-count-wrap pld-count-wrap\">8    <\/span>\r\n<\/div><div class=\"pld-dislike-wrap  pld-common-wrap\">\r\n    <a href=\"javascript:void(0)\" class=\"pld-dislike-trigger pld-like-dislike-trigger  \" title=\"Gef\u00e4llt mir nicht\" data-post-id=\"21205\" data-trigger-type=\"dislike\" data-restriction=\"cookie\" data-already-liked=\"0\">\r\n                            <img src=\"https:\/\/linux-bibel.at\/wp-content\/uploads\/2023\/12\/Daumen-Runter.png\" alt=\"Gef\u00e4llt mir nicht\" \/>\r\n            <\/a>\r\n    <span class=\"pld-dislike-count-wrap pld-count-wrap\"><\/span>\r\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Hin und wieder ist es n\u00fctzlich, Informationen \u00fcber eine Domain zu bekommen. Manchmal, weil man Spam auf der Spur ist, mal, weil man herausfinden will, was man \u00fcber seine eigene Domain herausfinden kann. Einiges bekommt man unter Linux schon mit Standard-Mitteln heraus, mit dnsenum holt man jedoch alles M\u00f6gliche \u00fcber eine Domain heraus, was \u00fcber [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":21209,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[72,4],"tags":[12,7,37,6],"class_list":["post-21205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sicherheit","category-terminal","tag-kommandozeile","tag-shell","tag-sicherheit","tag-terminal"],"_links":{"self":[{"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/posts\/21205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/comments?post=21205"}],"version-history":[{"count":4,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/posts\/21205\/revisions"}],"predecessor-version":[{"id":21214,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/posts\/21205\/revisions\/21214"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/media\/21209"}],"wp:attachment":[{"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/media?parent=21205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/categories?post=21205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linux-bibel.at\/index.php\/wp-json\/wp\/v2\/tags?post=21205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}