Pentestas / help

DNS Surface Audit

DNS Surface Audit — Six DNS posture checks: rebinding, wildcard, internal IP leaks, open recursion, NS version, split-horizon.
DNS Surface Audit in the Pentestas Security tools UI.

Category: DNS

Goes beyond enumeration: probes for DNS rebinding susceptibility, wildcard pollution, private IPs in public answers, open recursion, CHAOS version.bind disclosure, and split-horizon symptoms. Findings can feed the next web/API scan on the same domain.

Inputs

Domain / zone name.

How to run it

  1. Open Security tools → DNS Surface Audit.
  2. Enter the zone → run.
  3. Triage INFO/HIGH findings before a full web scan.

Output

Structured checks with severity + evidence strings.

Notes

  • Also available as a first-class scan type in some workflows — same checks, longer history when run as a scan.
  • /tools/dns-audit/
  • /tools/dns-lookup/
  • /tools/dns-infra/

← Back to Security tools overview