In the previous lecture we explained the role of Dennis Dennis include all the services name and their
IP and they usually include those name and IP in something called Zone.
So in the DNS each zone include names and IP and those are critical information.
I mean it will not lead to full compromising vision of the network if it get exposed but definitely
it will help you plan for a successful attack.
So since those are critical information in the sense that if the DNS server crash no one will be able
to access any Web site because he is not able to resolve from name to IP so they usually any network
will have more than one DNS server.
And between those DNS server they will be a transfer of those zones.
So if we have a primary DNS and a secondary DNS and the primary DNS hold all the name and IP in one
zone it will frequently copy this soon to another Dennis.
So if the primary fail the secondary will take over this process is called Zone transfer many network
and administrator do not configure the DNS server properly in a ways that any computer can communicate
with the primary DNS and tell him that I am your secondary Dennis.
Could you please send me a copy from the zone file that include all the name of service and IP and because
it was not well configured the primary DNS will send a copy from the zone that include all the name
and IP to the hacker machine.
Assuming that he is a secondary DNS let's see how it's it's done and how successful it could be.
Now one more time getting his own transfer will not lead to a full compromise nation but as we're going
to see during the course it will help plan for a successful attack.
So in the previous lecture we saw how to get the three DNS server and mega core one and as and end is
to a nursery.
Now let's see how to uh try to do is own Crossfire and get a copy of this so we're gonna try on the
three server we're going to use the same comment which is host.
Let me clear the screen first.
Clear
and let's one more time get the uh three DNS server fro for make a corporate make a call upon dot com
then we're gonna use host
minus n instead of T and then
we're gonna put here the name of the domain.
Send space and the name of the first server.
Com.
This will try to ask for a copy of the DNS server.
Sorry so.
Copy and
well sorry.
Open terminal
OK.
And let's create the size zoom in and zoom in.
And one more time.
Host minus t
make the core 1.
Core
1
come MIG
again host minus teh mega core.
Okay let's take it from here.
And write it down.
Be a spelling mistake of the name or something.
So
oh yeah we forget Zen s to get Zen is record.
Maybe this was a problem.
So an S yes.
And then we can use host
minus n which will try its own Transfield or getting a copy from Zen we gonna remove an S and will type
at the end of the comment and S1 booked mega corps on
both.
So this is the first one it reads his own transfer field.
Let's try the second server.
She's an s to
and N S too.
Here you go.
And as you can see you've got all the services and their IP quite useful.
You just need to wait and you're going to see how you can utilize that for a very successful attack.