DNINT Tools

The kit the operator reaches for in DNINT collection and analysis. Tooling rotates; the headings hold as the capabilities the operator needs covered.

Tool	Purpose
nmap	Host discovery, port and service scanning, OS fingerprint, NSE.
masscan / zmap	Internet-scale port scanners.
rustscan	Fast scanner front-end over nmap.
amass / subfinder	Subdomain enumeration.
shodan / censys / zoomeye / binaryedge / onyphe	Internet-wide scanner search engines.
dnsx / massdns	Mass DNS lookup.
dnstwist	DNS-typosquat enumeration.
certificate transparency (crt.sh, censys CT)	Subdomain enumeration via CT logs.
bgpview / ripestat	ASN, prefix, peering.
whois / rdap	Domain and IP registration.
wireshark / tshark / zeek / suricata	Traffic capture and analysis.

References

• DNINT for the discipline overview.

• DNINT Sources for the data sources.

• DNINT Techniques for the tradecraft.