Home page logo

pen-test logo Penetration Testing mailing list archives

Re: anonymous Zonetransfer (AXFR) exploatation
From: mouss <mouss () netoyen net>
Date: Wed, 19 Mar 2008 22:33:03 +0100

Dave Howe wrote:
Radu Oprisan wrote:
LordDoskias wrote:

The best thing that I can think if to use the information obtained
from the zone transfer. Perhaps some "private" hosts will come up that
you can look into? To my mind AXFR transfers should be considered as
part of the  reconnaissance stage of a pen-test.

Actually, they were, a long time ago.

Bearing in mind of course that it is considered an illegal hacking technique by American courts :)

I only knew of one state where this happened. does that expand to other states?

This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]