Automated Domain Enumeration with DNSDumpster

A crucial part of any phishing investigation or threat hunting activity (or red teaming even) is domain enumeration. A great tool for that is DNSDumpster, which returns DNS info in a nice format.

https://dnsdumpster.com/

So I spent a little time today to spin up a few scripts that query DNSDumpster for a domain and pulls back the results as both text and also gets the visual representation that the site supplies.

A handy tool to help with those API calls is:

Then you can just create a quick python script that queries the API for a domain and voila:

3 Likes