DNS and TracerouteIn this video, weâll discuss some basic DNS enumeration tools like âdigâ, ânslookupâ and âhostâ.
Weâll use the âdigâ (Domain Internet Groper) tool to query the DNS server to resolve âwww.logicalsecurity.comâ.
Weâll now use the ânsâ switch to query the DNS server to return the same server of âwww.logicalsecurity.comâ.
The âmxâ (mail exchanger) switch returns the mail servers of âlogicalsecurity.comâ.
The âaxfrâ switch is used for zone transfer. Although in our case, it has failed as most secure DNS servers do not allow zone transfers.
The ânslookupâ tool is used for the same purpose as âdigâ, but is seldom used in the linux environment. Once we enter ânslookupâ, and interactive prompt appears where we can enter âset type=nsâ or âet type=mxâ for name and mail servers respectively.
Another commonly used tool for DNS lookups is âhostâ. The â-tâ specifies the query types, in our case they are ânsâ, âmxâ and âcnameâ for the name server, mail server and canonical name respectively.
The â-lâ switch lists ...