Exam 312-50v10 topic 1 question 247 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 247
Topic #: 1

You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain. If the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?

A. list domain=abccorp.local type=zone
B. Is ""d accorp.local
C. list server=192.168.10.2 type=all
D. Iserver 192.168.10.2 ""t all

Show Suggested Answer

Suggested Answer: B 🗳️

by TrendMicroDLPSSucks at Aug. 24, 2020, 1:50 a.m.

Comments

Submit Cancel

_pasha

12 months ago

Answer B type "ls -d <URL>", if the domain is having DNS Zone Transfer Misconfiguration, then it will show up.

upvoted 1 times

...

TrendMicroDLPSSucks

1 year, 4 months ago

nslookup -ls just sends a raw AXFR query to the remote nameserver, which will initiate a zone transfer if and only if the remote nameserver is dumb enough to respond to unsolicited, unauthorized AXFRs originating from random machines on the Internet.

upvoted 2 times

...