DNS


Nmap discovered a DNS server on the target UDP port 53

reverse lookup


┌──(kali㉿kali)-[~/archive/htb/labs/object]
└─$ nslookup       
> server 10.10.11.132
Default server: 10.10.11.132
Address: 10.10.11.132#53
> 127.0.0.1
;; communications error to 10.10.11.132#53: timed out
1.0.0.127.in-addr.arpa	name = localhost.
> object
Server:		10.10.11.132
Address:	10.10.11.132#53
 
** server can't find object: SERVFAIL
> object.htb
;; communications error to 10.10.11.132#53: timed out
;; communications error to 10.10.11.132#53: timed out
;; communications error to 10.10.11.132#53: timed out
;; no servers could be reached

nslookup fails due to not being able to resort to UDP

dig


┌──(kali㉿kali)-[~/archive/htb/labs/object]
└─$ dig +notcp any @$IP object.htb
;; communications error to 10.10.11.132#53: timed out
 
; <<>> DiG 9.18.16-1-Debian <<>> +notcp any @10.10.11.132 object.htb
; (1 server found)
;; global options: +cmd
;; got answer:
;; ->>header<<- opcode: QUERY, status: SERVFAIL, id: 45397
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
 
;; opt pseudosection:
; edns: version: 0, flags:; udp: 4000
;; question section:
;object.htb.			IN	ANY
 
;; query time: 4931 msec
;; server: 10.10.11.132#53(10.10.11.132) (UDP)
;; when: Wed Sep 20 20:11:37 CEST 2023
;; msg size  rcvd: 39

The +notcp flag forces use of UDP Nothing found