performing-dns-enumeration-and-zone-transfer

During authorized reconnaissance, enumerate DNS records, attempt zone transfers (Zone Transfer), brute-force enumerate subdomains, and map DNS infrastructure to identify attack surface, misconfigurations, and information leakage in the target domain.