nslookup 10.10.10.13 will get domain name
dnsrecon -d megacorpone.com -t axfr for dnszone transfer
dnsrecon -d megacorpone.com -t axfr -n <server> can put ip address of machine
dnsrecon -d megacorpone.com -D ~/list.txt -t brt for bruteforce
edit /etc/hosts