You work as a Desktop Technician in we-are-secure.com Inc. Due to some misunderstanding you are terminated from the company. You feel that you were wrongly terminated. Due to this, you want to revenge of your wrong termination by hacking into the we-are-secure network. Since you worked as a Desktop Technician, you remember all the server names. You try to run the axfr and ixfr commands on these servers using the DIG tool. What attack do you want to perform?

Question

Accepted Answer

C. DNS zone transfer AXFR is the DNS protocol command for a full zone transfer and IXFR is for an incremental zone transfer - both are used legitimately to replicate zone data between authoritative servers. When exploited by an attacker using a tool like DIG, these commands can extract a complete map of all hostnames, IP addresses, and records in a domain, enabling detailed network reconnaissance. This is the classic DNS zone transfer attack, enabled when a DNS server is misconfigured to allow transfers from untrusted sources.

Answer

A. Sniffing attack A sniffing attack involves passively capturing packets as they traverse the network, not actively issuing DNS protocol commands to query a server.

Answer

B. Password cracking attack A password cracking attack uses brute force or dictionary methods to recover credentials, which is unrelated to DNS zone queries.

Answer

D. Replay attack A replay attack captures previously valid network packets and retransmits them to impersonate a session, not to enumerate DNS zone records.

You work as a Desktop Technician in we-are-secure.com Inc. Due to some misunderstanding you are terminated from the company. You feel that you were wrongly terminated. Due to this, you want to…

Question

Options

How the community answered

Why each option

Topics

Community Discussion