Penetration Testing mailing list archives

Re: [PEN-TEST] DNS zone transfer tool for NT


From: "Wannemacher, Eric" <EricW () METATEC COM>
Date: Tue, 17 Oct 2000 13:35:38 -0400

How about:

echo ls -d %1 | nslookup - %2 > c:\zone.txt

in a batch file dnsxfr.bat with a command line of

dnsxfr.bat <domain> <target name server>

to accomplish this?



-----Original Message-----
From: H Carvey [mailto:keydet89 () YAHOO COM]
Sent: Tuesday, October 17, 2000 7:40 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: DNS zone transfer tool for NT


I'm sure that if you try it yourself, you'll see
that this won't work.

You see, that portion of nslookup is
interactive.  So, the following needs to be
scripted:

c:\>nslookup
server {host}
ls -d {domain}

Your batch file doesn't contain the switch to
the necessary server to test the transfer
capability.


Couldn't something as simple as:

echo ls -d %1|nslookup >c:\zone.txt

In a batch file accomplish an:

ls -d <domainname>

in a scripted form?


Current thread: