skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

dnsx-resolve

Performs bulk DNS resolution and record queries using the dnsx toolkit.

1.7k|238|Updated Dec 7, 2019
Search Tags:#reconnaissance#dns records#dnsx#projectdiscovery#dns resolution#wildcard filtering#subdomain validation
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill dnsx-resolve
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dnsx-resolve
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/dnsx-resolve
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill dnsx-resolve

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dnsx.

What problem does it solve?

Manually resolving large lists of subdomains and verifying which ones are alive is slow and error-prone. This Skill automates bulk DNS resolution, record collection, and wildcard filtering so you can quickly turn raw subdomain lists into validated, actionable targets.

Core Features & Use Cases

  • Bulk DNS Resolution: Query A, AAAA, CNAME, NS, MX, and TXT records for single domains or large lists with high concurrency.
  • Subdomain Validation & Wildcard Filtering: Pipe subfinder output into dnsx to verify live subdomains and automatically filter wildcard DNS entries.
  • Pipeline Integration: Chain with httpx for HTTP probing, extract IPs with deduplication, or pull CNAME records for subdomain takeover detection.
  • Use Case: After enumerating subdomains for target.com with subfinder, pipe the results into dnsx to confirm which hosts resolve, extract unique IP addresses, and feed the live hosts into httpx for web service discovery.

Quick Start

Resolve all subdomains in subdomains.txt and show their A records using dnsx with silent output.

Frequently Asked Questions about dnsx-resolve

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bulk resolve DNS records for a list of subdomains?▼

Use dnsx with the -l flag to read a file of domains and -a -resp to return A records, for example: dnsx -l subdomains.txt -a -resp -silent. Add -aaaa, -cname, -mx, or -txt to query additional record types in the same run.

How to verify which subdomains are alive after enumeration?▼

Pipe subfinder output directly into dnsx: subfinder -d target.com -silent | dnsx -silent. Only subdomains that successfully resolve are returned, giving you a validated list of live hosts.

How do I filter out wildcard DNS entries in subdomain results?▼

Use the -wd flag with the root domain: subfinder -d target.com -silent | dnsx -wd target.com -silent. dnsx automatically detects and filters wildcard responses so only genuinely resolving subdomains remain.

Can dnsx use custom DNS resolvers or output JSON?▼

Yes. Specify resolvers with -r 8.8.8.8,1.1.1.1 and enable JSON output with -json -o results.json. You can also control concurrency with -t and perform PTR reverse lookups with -ptr.

How do I extract CNAME records for subdomain takeover checks?▼

Run subfinder -d target.com -silent | dnsx -cname -resp -silent to list each subdomain alongside its CNAME target. These CNAME chains can then be checked against known vulnerable services for takeover detection.

Related Skills

Explore More Software Engineering Skills→
macaughmacaugh
5

Automated Subdomain Enumeration

Enumerate subdomains via passive sources and active DNS techniques.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

transilience-reconnaissance

Automate domain assessment and web application mapping for security auditing.

Community
Advanced
subimagesecsubimagesec

investigate-ip

Resolve IP and domain ownership across AWS, GCP, and Azure resources.

Official
Advanced
woohyun212woohyun212
21

dns-recon

Map DNS records and detect misconfigurations using dig, host, and nslookup.

Community
Advanced