GCIH · Question #301
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker…
The correct answer is A. Host B. Dig D. NSLookup. Host, Dig, and NSLookup are standard DNS lookup utilities that support AXFR zone transfer requests, allowing an attacker to retrieve a complete zone file from an authoritative DNS server.
Question
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone's DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a DNS zone transfer? Each correct answer represents a complete solution. Choose all that apply.
Options
- AHost
- BDig
- CDSniff
- DNSLookup
How the community answered
(31 responses)- A94% (29)
- C6% (2)
Why each option
Host, Dig, and NSLookup are standard DNS lookup utilities that support AXFR zone transfer requests, allowing an attacker to retrieve a complete zone file from an authoritative DNS server.
The 'host' command-line utility supports zone transfer requests and can be used with the -l flag to query an authoritative DNS server for all records in a zone.
Dig supports zone transfers natively using the AXFR query type (e.g., dig AXFR @server domain), making it one of the most commonly used tools for DNS zone transfer enumeration.
DSniff is a network packet-sniffing and credential-interception tool suite designed to capture passwords and session data from network traffic, and it has no functionality for querying DNS servers or requesting zone transfers.
NSLookup can perform zone transfers using the 'ls -d' command in interactive mode to retrieve all DNS records from an authoritative server for a specified domain.
Concept tested: DNS zone transfer enumeration tools identification
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/nslookup
Topics
Community Discussion
No community discussion yet for this question.