DNS enumeration is significant for a variety of reasons. It can indicate the scale of the target organization's enterprise, which translates to the attack surface's potential size. The number of domains and sub-domains can be used to determine the size of an organisation.
Top DNS Recon Tools and Techniques:
SecurityTrails advanced DNS enumeration.
Enumeration of DNS records. The process of identifying the DNS servers and records associated with a target is known as DNS enumeration. Domain IP addresses are stored in address (A) records. MX records are records that contain email addresses.
The process of enumerating valid (resolvable) subdomains for one or more domains is known as subdomain enumeration (s). It's difficult to get a list of existing subdomains unless the DNS server publishes a whole DNS zone (through AFXR). A frequent technique is to look up common names in a dictionary and try to resolve them.
Cyber Forensics Masterclass with Hands on learning