Query a DNS server for records and attempt a zone transfer against the target nameserver
Command: Linux copy
dig $DOMAIN @$IP
References: