network enabled verified low v1.0.0

dig

DNS lookup utility for querying name servers and debugging DNS resolution issues.

📋 Live Preview

dig {flag-4} {flag-6} {flag-b} {flag-c} {flag-f}

📎 flag-4 📎 flag-6 📎 flag-b 📎 flag-c 📎 flag-f

dig {flag-4} {flag-6} {flag-b} {flag-c} {flag-f}

Sandbox: execFile · Timeout: 30s

Capabilities

security.recon.dns

network.dns.query

network.dns.lookup

network.dns.reverse

network.dns.trace

system.file.read

Parameters

Name	Type	Required	Default	Description	Aliases
`flag-4`	string	No	-	(use IPv4 query transport only)	`-4`
`flag-6`	string	No	-	(use IPv6 query transport only)	`-6`
`flag-b`	string	No	-	(bind to source address/port)	`-b`
`flag-c`	string	No	-	(specify query class)	`-c`
`flag-f`	string	No	-	(batch mode)	`-f`
`flag-k`	string	No	-	(specify tsig key file)	`-k`
`flag-m`	string	No	-	(enable memory usage debugging)	`-m`
`flag-p`	integer	No	-	(specify port number)	`-p`
`flag-q`	string	No	-	(specify query name)	`-q`
`flag-r`	string	No	-	(do not read ~/.digrc)	`-r`
`flag-t`	string	No	-	(specify query type)	`-t`
`flag-u`	string	No	-	(display times in usec instead of msec)	`-u`
`flag-x`	string	No	-	(shortcut for reverse lookups)	`-x`, `-n`
`flag-y`	integer	No	-	d-opt is of the form +keyword[=value], where keyword is: +[no]aaflag (Set AA flag in query (+[no]aaflag)) +[no]aaonly (Set AA flag in query (+[no]aaflag)) +[no]additional (Control display of additi...	`-y`
`h`	boolean	No	-		`-h`
`v`	boolean	No	-		`-v`

Artifacts

Type	Description	MIME	Schema	Trust
`network.dns.response`	DNS response data	text/plain	-	verified

Contract

Inputs

network.target.domain

Domain name to query

Outputs

network.dns.response

DNS query results with record details

Side effects: network_traffic

Workflow Edges

Produces

network.dns.response

Consumes

network.target.domain

Resource Profile

Resource	Value
CPU	low
Memory	8 MB
Network	low
Disk I/O	none

Examples

Standard A record lookup

dig example.com A

Query MX records for mail servers

dig example.com MX

Trace full DNS delegation path

dig example.com +trace

Query a specific nameserver

dig @8.8.8.8 example.com A

Reverse DNS lookup

dig -x 142.250.80.14

Bulk domain transfer attempt (often disabled)

dig example.com AXFR

Read an arbitrary file by specifying it as a batch file. Note that this will leak lines of the file read as outbound DNS lookups.

dig -f /etc/passwd

Argument injection: read local file: Read an arbitrary file by specifying it as a batch file. Note that this will leak lines of the file read as outbound DNS lookups.

dig -f /etc/passwd

Basic A record lookup

dig example.com

Specify DNS server to use for the query

dig @8.8.8.8 example.com

cheat.sheets: dig

dig example.com AAAA

Display only the answer section of the query

dig +noquestion +noauthority +noadditional +noanswer example.com

Perform a reverse DNS lookup for an IP address

dig -x 192.0.2.1

Use verbose output to display entire response

dig +noall +answer +comment example.com

Query whois information using dig

dig +short txt whois.example.com

Query DNS for specific port using SRV record

dig _sip._tcp.example.com SRV

Conduct a trace from root to authoritative DNS server

dig +trace example.com

Measure and display query time

dig example.com +stats

Get list of name servers for a domain

dig example.com NS

Documentation

dig — DNS Lookup Utility

Dig (Domain Information Groper) is the most versatile DNS debugging tool available. It provides detailed information about DNS records, server responses, and resolution paths.

Common Record Types

Type	Purpose	Example Use
A	IPv4 address mapping	`dig example.com A`
AAAA	IPv6 address mapping	`dig example.com AAAA`
MX	Mail exchange servers	`dig example.com MX`
NS	Authoritative name servers	`dig example.com NS`
TXT	Arbitrary text data (SPF, DKIM)	`dig example.com TXT`
CNAME	Canonical name alias	`dig www.example.com CNAME`
SOA	Start of Authority (zone metadata)	`dig example.com SOA`

Output Interpretation

; <<>> DiG 9.10.6 <<>> example.com A
;; QUESTION SECTION:
;example.com.           IN  A

;; ANSWER SECTION:
example.com.        3600    IN  A   93.184.216.34

;; Query time: 45 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Mon Jan 15 10:00:00 EDT 2026
;; MSG SIZE  rcvd: 56

Field	Meaning
3600	TTL (seconds) — how long the record can be cached
IN	Internet class
Query time	Round-trip in milliseconds

Advanced Queries

# Get all record types
dig example.com ANY

# DNSSEC validation
dig example.com +dnssec

# Short output (just the values)
dig example.com +short

# Multiline output for readability
dig example.com +multiline

# Query specific EDNS options
dig example.com +edns=0

dig