Nslookup

nslookup (Name Server Lookup) is a command-line tool used to query DNS (Domain Name System) servers and retrieve information about domain names, IP addresses, and DNS records.

It is mainly used for DNS troubleshooting, network analysis, and information gathering during reconnaissance.

During cybersecurity reconnaissance, nslookup helps security professionals understand a target's DNS infrastructure, identify associated services, and verify DNS information discovered through other tools.

Basic Domain Lookup

What is it?

The basic nslookup command is used to query DNS information for a domain name.

It retrieves the IP address associated with the domain by sending a DNS query to the configured DNS resolver.

Why is it Used?

• Find the IP address of a domain.
• Verify DNS resolution.
• Perform initial DNS reconnaissance.
• Identify the server associated with a domain.

Syntax

nslookup <domain>

How it Works

1. User provides a domain name.
2. Nslookup sends a DNS query to the configured DNS server.
3. The DNS server searches for the domain record.