DNS
Nmap discovered a DNS server on the target port 53
The running service is UNIDENTIFIED
Reverse Lookup
┌──(kali㉿kali)-[~/archive/htb/labs/blazorized]
└─$ nslookup
> server 10.10.11.22
Default server: 10.10.11.22
Address: 10.10.11.22#53
> 127.0.0.1
1.0.0.127.in-addr.arpa name = localhost.
> DC1
Server: 10.10.11.22
Address: 10.10.11.22#53
> dc1.blazorized.htb
;; communications error to 10.10.11.22#53: timed out
;; communications error to 10.10.11.22#53: timed out
;; communications error to 10.10.11.22#53: timed out
;; no servers could be reached
> BLAZORIZED.HTB
;; communications error to 10.10.11.22#53: timed out
;; communications error to 10.10.11.22#53: timed out
;; communications error to 10.10.11.22#53: timed out
;; no servers could be reached
** server can't find DC1: SERVFAIL
> HTB
Server: 10.10.11.22
Address: 10.10.11.22#53
Reverse lookup failed, and the target DNS server cannot even resolve the FQDN of the target system It appears to be misconfigured
dig
┌──(kali㉿kali)-[~/archive/htb/labs/blazorized]
└─$ dig any dc1.blazorized.htb @$IP
;; communications error to 10.10.11.22#53: timed out
; <<>> DiG 9.19.21-1-Debian <<>> any dc1.blazorized.htb @10.10.11.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 50781
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;dc1.blazorized.htb. IN ANY
;; Query time: 1771 msec
;; SERVER: 10.10.11.22#53(10.10.11.22) (TCP)
;; WHEN: Mon Jul 01 17:01:46 CEST 2024
;; MSG SIZE rcvd: 47
┌──(kali㉿kali)-[~/archive/htb/labs/blazorized]
└─$ dig any blazorized.htb @$IP
;; communications error to 10.10.11.22#53: timed out
; <<>> DiG 9.19.21-1-Debian <<>> any blazorized.htb @10.10.11.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34494
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;blazorized.htb. IN ANY
;; Query time: 2431 msec
;; SERVER: 10.10.11.22#53(10.10.11.22) (TCP)
;; WHEN: Mon Jul 01 17:02:23 CEST 2024
;; MSG SIZE rcvd: 43
The target DNS server does not respond
dnsenum
┌──(kali㉿kali)-[~/archive/htb/labs/blazorized]
└─$ dnsenum dc1.blazorized.htb --dnsserver $IP -f /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt --threads 16
dnsenum VERSION:1.3.1
----- dc1.blazorized.htb -----
Host's addresses:
__________________
Name Servers:
______________
dc1.blazorized.htb NS record query failed: SERVFAIL
dnsenum failed
dnsrecon
┌──(kali㉿kali)-[~/archive/htb/labs/blazorized]
└─$ dnsrecon -d BLAZORIZED.HTB -n $IP -D /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-110000.txt --threads 16
[*] std: Performing General Enumeration against: BLAZORIZED.HTB...
[-] A timeout error occurred please make sure you can reach the target DNS Servers
[-] directly and requests are not being filtered. Increase the timeout from 3.0 second
[-] to a higher number with --lifetime <time> option.
dnsrecon failed to connect to the DNS server