🔮
P4n1cBook
  • 🏴‍☠️Welcome!
    • 🔮P4n1cBook
    • 📚Bookmarks
    • 🚨Licence and Disclaimer
  • Fundamentals
    • Starter Kit
      • Linux
      • PowerShell
      • Git
      • 💾Regex
      • curl
      • tcpdump
      • Nmap
      • 🦈Wireshark
      • Metasploit
    • 🌐Network Protocols
      • ICMP
      • SSH
      • Telnet
      • DNS
      • FTP
      • HTTP/HTTPS
      • SMB
      • SNMP
      • SMTP
      • NFS
      • IPP
      • WinRM
      • LLMNR
    • Code
      • Python Essentials
      • C & C++
    • Web APIs
      • GraphQL
    • Shells/TTYs
    • Dorks
    • Cryptography
    • Reverse Engineering
      • GDB
      • Binaries
  • Web Exploitation
    • Web Enumeration
    • Web Fuzzing
      • ffuf
      • feroxbuster
      • Gobuster
      • GoWitness
    • Main Techniques
      • Arbitrary File Read
      • Session Hijacking
      • SSRF
      • Eval Injection
      • Template Manipulation
      • Path Traversal
      • Prototype Pollution
      • XXE
      • Deserialization
      • Log Poisoning
      • Command Injection
      • SQLi
        • SQLmap
      • Arbitrary File Upload
      • SSTI
      • LFI
      • XSS
    • Web Servers
      • Apache
      • Nginx
      • Werkzeug
    • Web Services/Frameworks
      • Wordpress
      • Laravel
      • Express
      • Magento
      • AIOHTTP
      • HashiCorp Vault
      • Tiny File Manager
      • Joomla
      • CMS Made Simple
      • 🌵Cacti
      • Tomcat
      • Zabbix
      • OpenNetAdmin
      • ImageMagick
    • Databases
      • MySQL
      • NoSQL
        • MongoDB
        • Redis
    • Java-based web application
      • pd4ml.jar
      • Struts
      • .WAR
      • JDWP
  • Cloud Exploitation
    • Kubernetes
    • AWS
  • Post Exploitation
    • File Transfer
      • Exfiltration
    • Credential Dumping
      • Thunderbird
    • Lateral Movement
    • Persistence
    • Linux Privilege Escalation
      • Static Binaries
      • Enumeration
      • Hijacks
      • Command Injection
      • Jailbreaks
      • Binary Exploitation - Linux
      • Kernel Exploits
      • Buffer Overflow - Linux
      • Docker
      • Abusing Wildcards
  • Wireless Exploitation
    • NFC
Powered by GitBook
On this page
Edit on GitHub
  1. Fundamentals
  2. Network Protocols

DNS

Domain Name System - Port 53

Enumeration

Resolve the IP

Start nslookup
nslookup

  • Specify the DNS server:

server 10.10.10.10

  • Now, query for the given IP address, looking up its DNS records:

10.10.10.10

Transfer Zones

  • If DNS is running over TCP try a zone transfer:

dig axfr HOST.NAME @10.10.10.29
Bruteforce DNS Hostname
nmap -Pn -script=dns-brute domain.com
Whois Query
nmap -script whois* domain.com
Banner Grab
nmap -n -p<PORT> --script dns-nsid <IP>
PreviousTelnetNextFTP

Last updated 6 days ago

🌐