Mastering Kali Linux for Web Penetration Testing

Getting fierce

dig and dnsrecon are fantastic tools, but wouldn't it be nice if we could go a little further and have a tool that tries to connect to the site's address blocks, automates the zone transfer, and does it all while logging? Fierce (written in Perl by Robert RSnake Hansen) can do just that. There are many options and modifiers that can be used when invoking Fierce, but in most cases, I do initial discovery using dig, move to Fierce for an attempted zone transfer and some connection probing, and then move into a more graphical and organized tool such as Maltego to build my network maps and enumerate relationships. To use Fierce to attempt a zone transfer and send the logs to a file, you can simply invoke the tool and it will do ...