Backtrack/Information-gathering/DNS

You are here:

Backtrack

Information gathering

DNS

What is it about?

Domain Name Service (DNS) is a service that ensures translation between IP addresses (66.249.92.104) and domain names (e.g. google.com). Port 53/tcp or 53/udp is generally used.

This service is depicted in following RFCs:

• 1983: RFC882 - RFC883
• 1987: RFC1034 - RFC1035
• 1994: RFC1591

DNS analysis is an important step in the reconnaissance process of a penetration test as it provides the auditor with relevant information about the target.

For more information, please refer to http://fr.wikipedia.org/wiki/Domain_Name_System.

BackTrack tools

•  Dnswalk
•  Dnstracer
•  Dnsenum
•  Dnsmap
•  Dnsrecon
•  Fierce
•  Lbd

Other tools

• Darkjumper
• Yeti (SensePost)
• DRIL (Domain Reverse IP Lookup)
• halberd
• RitX