DNS

ℹ️ Informations¶

• 🌐 Website: HackTheBox
• 📚 Module: Footprinting
• 🔗 Link: DNS

❓Question¶

Interact with the target DNS using its IP address and enumerate the FQDN of it for the "inlanefreight.htb" domain.

📋 Walkthrough¶

Let's do some digs!

dig any inlanefreight.htb @10.129.205.130

❓Question¶

Identify if its possible to perform a zone transfer and submit the TXT record as the answer. (Format: HTB{...))

📋 Walkthrough¶

You have to try axfr in all DNS you find in your digs.

dig axfr in******inlanefreight.htb @10.129.205.130

❓Question¶

What is the IPv4 address of the hostname DC1?

📋 Walkthrough¶

The answer is in the output of previous answer

❓Question¶

What is the FQDN of the host where the last octet ends with "x.x.x.203"?

📋 Walkthrough¶

Here we have to do some sub-subdomain enumeration... from previouses answers, we discovered some dns like in****** or ***. Let's try enum one of these.

dnsenum --dnsserver 10.129.205.130 --enum -p 0 -s 0 -o subdomains.txt -f /usr/share/seclists/Discovery/DNS/fierce-hostlist.txt ***.inlanefreight.htb