Ravindra BagaleCourses & study guides

37. Enumeration: NetBIOS, SMB, SNMP, LDAP, SMTP, NFS and DNS

37.7 DNS Enumeration

By Last updated:

DNS basics Chapter 3/19 madhe shiklo. Enumeration view: records dump, subdomain lists, zone transfer (AXFR).

# Records
dig @192.168.56.20 lab.local ANY
dig @192.168.56.20 lab.local NS
dig @192.168.56.20 lab.local MX
nslookup lab.local 192.168.56.20

# Zone transfer – if allowed, FULL map leaks
dig @192.168.56.20 lab.local AXFR

# Tool concepts (lab domain only)
sudo apt install -y dnsenum fierce
dnsenum --dnsserver 192.168.56.20 lab.local
# fierce / similar: subdomain wordlist against YOUR lab domain only

Jar AXFR allow asel – ek command madhe saglya hostnames. Chapter 19 madhe fix pan shiklo (allow-transfer).

Defence: AXFR fakt secondary DNS IPs (TSIG); split DNS (internal vs public); no version disclosure; rate-limit / alert on AXFR + NXDOMAIN bursts; remove stale records. Samjla ka?

Ravindra Bagale's Tip

Students AXFR fail zala ki dukhi hotaat. Fail = server hardened – changla. Exam/interview madhe "AXFR refused" he positive finding defender sathi. Brute force subdomain still possible – mhanun monitoring pan theva.

Lab

Chapter 19 sarkhe: dig @192.168.56.20 lab.local AXFR – transfer succeed ki fail? Succeed asel tar host list save kara ani BIND madhe allow-transfer { none; }; + restart (lab). Fail asel tar defence already OK – dnsenum ne lab domain var record list compare kara.