利用Fierce2查询子域名

安装方法引用Mickey的:

1.
Mickey@pentestbox:/pentest/enumeration/#svn co https://svn.assembla.com/svn/fierce/fierce2/trunk/ fierce2/

Mickey@pentestbox:/pentest/enumeration/#git clone git://github.com/miyagawa/cpanminus.git

Mickey@pentestbox:/pentest/enumeration/#perl Makefile.PL

Mickey@pentestbox:/pentest/enumeration/#make install

2.
Mickey@pentestbox:/pentest/enumeration/fierce2# perl Makefile.PL
Generating bin/cpanm from cpanm
Writing Makefile for App::cpanminus
Writing Makefile for Fierce::Base

如果上步提示缺少模块，则用CPAN安装，比如安装Test::Class模块
Mickey@pentestbox:/pentest/enumeration/fierce2#cpan
cpan[1]> install Test::Class

Mickey@pentestbox:/pentest/enumeration/fierce2#make install

常用查子域名语句:perl fierce2.pl -dns google.com -wide

如图:

 

其他一些命令:

perl fierce.pl -dns widget.com -search widgetcompany,nutsandbolts

我们目标DNS是widget.com发现其还管理着nutsandbolts网站,并且存在@widgetcompany的邮箱后缀,通过-search能够查询到相关信息

perl fierce.pl -range 10.10.10.0-255 -dnsserver ns1.example.com

查询内网域,定制一个DNSSERVER

perl fierce.pl -dns example.com -connect headers.txt -fulloutput -file output.txt

可以连接一个HTTP头文件对目标进行Http Head Injection 不过用处不大,耗时

perl fierce.pl -dns example.com -wordlist dictionary.txt -file output.txt

可以自己定制二级域名的字典来进行查询