Sunday, December 12, 2010

Finding all subdomains of any specific domain (DNS afxr)

February 24, 2010 by admin  
Filed under General

It is possible to get list of all subdomains of any domain name. However, that must be allowed by the DNS Server. This is called AXFR.


Step One: Getting authoritative nameserver(s) from linux shell

dig domainname.com


Now check the output in authority section. Let assume it is ns1.somehost.com. Now use the dig command as follow:

dig @ns1.somehost.com domainname.com axfr

If it is allowed, you should see all the sub-domains under the domain domainname.com. If it has multiple DNS servers, you may try one after another as long as you did not reach your goal.

GD Star Rating
loading...
Digg This
Reddit This
Stumble Now!
Buzz This
Vote on DZone
Share on Facebook
Bookmark this on Delicious
Kick It on DotNetKicks.com
Shout it
Share on LinkedIn
Bookmark this on Technorati
Post on Twitter
Google Buzz (aka. Google Reader)

Related posts:

  1. The dos and don’ts of domain registration
  2. How to transfer a domain name
  3. How to point a sub-domain to a different IP Address or Server?
  4. How to edit DNS zone (A, CNAME, TXT) in cPanel (not in WHM) as End User (Domain Owner)
  5. Delete some specific files from all subdirectories

Comments

2 Responses to “Finding all subdomains of any specific domain (DNS afxr)”
  1. buy domain names says:

    AXFR us used for replicating DNS data across DNS servers and and thanks for posting this blog regarding AXFR ank keep posting blogs like this.

    GD Star Rating
    loading...
  2. Magic-NET says:

    You can also find subdomains using this page:
    http://www.magic-net.info/dns-and-ip-tools.php

    If zone transfer is not possible, this tool will use search engine results.

    GD Star Rating
    loading...

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!