nslookup

A Swiss army knife of a tool for finding internal/external network resources

Finding domain controllers and saving them to a text file

nslookup -type=SRV _ldap._tcp.dc._msdcs.DOMAIN.COM | awk '{ print $7 }' | sed 's/\.$//g' | sed '/^$/d' | sort > dcs.txt