DNS Zone Transfer

DNS Zone Transfers allow an attacker to query all records from a DNS server. It may bring back information about elements which are accessible from the internet but wouldn't come back from a google search. This will give the attacker alot of knowlege which can help them conduct a successful attack.

To find out the name servers of a domain use:

host -t ns domain.com

To query the DNS server

dig axfr @nameserver domain.com

Last updated