Enumeration continued[nothing much to discuss]

Keeping it short this post is the continuation of previous post reconnaissance so nothing much to discuss. You can google out the definitions for all subheadings if i get time will update it later. Just follow the commands. 

                                                              DNS lookup

#Forward DNS lookup

nano forward.sh

#!/bin/bash

for name in $(cat list.txt);do

host $name.targetwebsite.com|grep "has address" |cut -d" " -f1,4 done

--------------------------------------------------------------------------------

#Reverse DNS lookup

#/bin/bash

for ip in $(seq 72 91);do

host 38.100.193.$ip |grep "targetwebsite" |cut -d" " -f1,5

done

chmod 755 reverse.sh

./reverse.sh

clear

---------------------------------------------------------------------------------

                                                     Zone transfer

DNS zone transfer

host -t ns targetwebsite.com 

host -l targetwebsite.com nsl.targetwebsite.com

host -l targetwebsite.com ns2.targetwebsite.com.

host -t ns targetwebsite.com |cut -d" " -f4

for server in $(host -t ns targetwebsite.com |cut -d" " -f4); do" " -f4); do host -l targetwebsite.com $server;done