DNS Enumeration

host <website>
host -t mx <domain>
Forward Lookup bruteforce for ip in $(cat list.txt); do host $ip.megacorpone.com; done where list.txt has all subdomain
Forward Lookup bruteforce for ip in $(seq 50 100); do host 38.100.193.$ip; done | grep -v "not found”