Penetration Testing: Re: [PEN-TEST] DNS zone transfer tool for NT

[Frank Knobbe <FKnobbe () KNOBBEITS COM>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: H Carvey [mailto:keydet89 () YAHOO COM]
> Sent: Tuesday, October 17, 2000 6:40 AM
>
> I'm sure that if you try it yourself, you'll see
> that this won't work.
>
> You see, that portion of nslookup is
> interactive.  So, the following needs to be
> scripted:
>
> c:\>nslookup
> > server {host}
> > ls -d {domain}
> Your batch file doesn't contain the switch to
> the necessary server to test the transfer
> capability.

Sure you can, but you are right, his script doesn't. Try this:

echo ls domain.com | nslookup - dnsservertobeused

That should dump the zone lookup on the screen. Redirect at your
leisure and parse it using 'for' with tokens.

Regards,
Frank


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOeyXr0RKym0LjhFcEQJMNgCfe2U+wRYUbQJcJPS3IUh7NMea9Z4AmwRa
ZZGVJ1YVsaF/VmJJQevbrnq/
=5OjB
-----END PGP SIGNATURE-----