Penetration Testing mailing list archives

Re: [PEN-TEST] DNS zone transfer tool for NT


From: Frank Knobbe <FKnobbe () KNOBBEITS COM>
Date: Tue, 17 Oct 2000 13:17:20 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

-----Original Message-----
From: H Carvey [mailto:keydet89 () YAHOO COM]
Sent: Tuesday, October 17, 2000 6:40 AM

I'm sure that if you try it yourself, you'll see
that this won't work.

You see, that portion of nslookup is
interactive.  So, the following needs to be
scripted:

c:\>nslookup
server {host}
ls -d {domain}

Your batch file doesn't contain the switch to
the necessary server to test the transfer
capability.


Sure you can, but you are right, his script doesn't. Try this:

echo ls domain.com | nslookup - dnsservertobeused

That should dump the zone lookup on the screen. Redirect at your
leisure and parse it using 'for' with tokens.

Regards,
Frank


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOeyXr0RKym0LjhFcEQJMNgCfe2U+wRYUbQJcJPS3IUh7NMea9Z4AmwRa
ZZGVJ1YVsaF/VmJJQevbrnq/
=5OjB
-----END PGP SIGNATURE-----


Current thread: