DNS Information Gathering

Welcome to my Forth tutorial on Information Gathering

In this tutorial we ll use gather DNS information about our target.

But before starting with basics of DIG we must know different types of DNS records.

The following list describes the common DNS record types and their use:

A (Address)
Maps a hostname to an IP address

SOA (Start of Authority)
Identifies the DNS server responsible for the domain information

CNAME (Canonical Name)
Provides additional names or aliases for the address record

MX (Mail Exchange)
Identifies the mail server for the domain

SRV (Service)
Identifies services such as directory services

PTR (Pointer)
Maps IP addresses to hostnames

NS (Name Server)
Identifies other name servers for the domain

AXFR (Zone Tranfer)
Can leak all the Sub-Domain Names registered for the domain

To install it on Windows:
1) Go to ftp://ftp.isc.org/isc/bind9/9.5.0-P2/
2) Download BIND9.5.0-P2.zip
3) Open the archive with WinZip
4) Extract dig.exe, libbind9.dll, libdns.dll, libisc.dll, libisccfg.dll, liblwres.dll to c:\windows\system32

DIG Syntax

Now to get the information on all of these records at once we can use ANY keyword. As shown below
DIG ANY <domain>

If you want to get NS records for the domain then you can go for the given query
DIG NS <domain>

In the same manner you have to change the option to get different records.
DIG <option> <domain>

This is all for this tutorial see you in the next tutorial of Information Gathering.


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s