RecHunter is a DNS enumeration tool built with bash. It simplifies querying DNS records and domain information for cybersecurity professionals and enthusiasts. From DNS lookups to WHOIS queries, RecHunter combines essential functionalities in a user-friendly, menu-driven interface.
DNS Enumeration involves gathering DNS records and domain-related information to identify vulnerabilities and map the structure of a target domain. RecHunter automates this process, enabling quick and effective reconnaissance.
- Interactive Interface: Easy-to-use menu-driven design.
- DNS Record Lookups:
- A, AAAA, CNAME, MX, and TXT records.
- WHOIS Lookup: Retrieve detailed domain registration information.
- Comprehensive Output: Save results for future reference.
- All-in-One Mode: Execute all operations in one go.
- Customizable: Extend functionality by adding new DNS record types.
Ensure dig and whois utilities are installed:
sudo apt update
sudo apt install dnsutils whoisgit clone https://github.com/shameemkabeer/RecHunter.git
cd RecHunter
chmod +x RecHunter.sh
./RecHunter.sh <domain_name>
Once the tool launches, you will be presented with the following menu options:
- 1: Query A record
- 2: Query AAAA record
- 3: Query CNAME record
- 4: Query MX record
- 5: Query TXT record
- 6: Perform WHOIS lookup
- 7: Perform all operations
- q: Exit the tool
- Run
./RecHunter.sh example.com. - Select
1(Query A Record) from the menu. - View the results on-screen and save them if needed.
- Ethical Usage: Use this tool only for authorized purposes. Unauthorized use may lead to legal consequences.
- Dependencies: Ensure
digandwhoisare installed for the tool to function correctly.
| Option | Description |
|---|---|
| Query A Record | Fetches IPv4 addresses associated with the domain. |
| Query AAAA Record | Fetches IPv6 addresses associated with the domain. |
| Query CNAME Record | Retrieves canonical names (aliases) of the domain. |
| Query MX Record | Finds the mail exchange servers for the domain. |
| Query TXT Record | Retrieves TXT records, often used for domain verification or SPF. |
| WHOIS Lookup | Provides domain registration and ownership information. |
| Perform All | Executes all DNS lookups and WHOIS queries in a single operation. |

Feel free to contribute by creating pull requests or submitting issues. All contributions are welcome!