How to use dig - Hackdot

Re:How to use dig by seanwilson on Saturday December 04, 2021 @12:38PM (#29442525)

Is there a simple way to list all A, CNAME, TXT etc. records for all subdomains of a domain from the terminal? Like what you would see in the web interface for your domain registrar? There's lots of free and simple web services that do this to check if your DNS settings have propagated worldwide. I usually just use one of those because DNS changes and checks aren't something I do often enough to remember the terminal commands for.

[ Parent | on HN ]

Re:How to use dig by cjcampbell on Saturday December 04, 2021 @12:47PM (#29442622)

Some resolvers will respond to the ANY type query, e.g., dig any …. This may not work with your default name server though, so look up some different servers to test. It’s common to disable this feature due to avoid it being abused as an amplifier for DDoS attacks (spoof a small query, get a large response sent to victim).

[ Parent | on HN ]

Re:How to use dig by toxik on Saturday December 04, 2021 @12:40PM (#29442552)

This is called zone transfer and is generally not enabled for obvious reasons.

The protocol to look for is IXFR and I’m pretty sure dig does it.

[ Parent | on HN ]

Re:How to use dig by jodrellblank on Saturday December 04, 2021 @02:33PM (#29443621)

Apparently not obvious, or they wouldn't be asking.

DNS is public data, what harm can come from asking for all of it? It doesn't leak any secrets, it doesn't take a lot of bandwidth or server load, it doesn't give you any power to imitate the domain, and it's nothing you couldn't find by brute-force eventually.

It might speed up some recon "what does this company have?" but DNS caches the world over will know what the company has as soon as users reference it. For all anyone knows they could be malicious DNS caches selling the information behind the scenes. Don't put secrets in public DNS records.

[ Parent | on HN ]

Re:How to use dig by ate53 on Saturday December 04, 2021 @07:29PM (#29445645)

Dynamic responses make transfers difficult to implement in some server architectures. Which is not to take away from your point - trying to hide things in the DNS is a fairly pointless exercise.

[ Parent | on HN ]

Re:How to use dig by bityard on Saturday December 04, 2021 @04:21PM (#29444436)

Good security practices dictate that you don't reveal any information that you don't have to.

[ Parent | on HN ]

Re:How to use dig by charcircuit on Saturday December 04, 2021 @08:39PM (#29446021)

Good security practices dictate that you shouldn't rely on security by obscurity.

[ Parent | on HN ]

Re:How to use dig by ate53 on Saturday December 04, 2021 @07:26PM (#29445628)

IXFR is for incremental transfers in which the client asks for a series of diffs between a particular serial and the current one. AXFR requests a transfer of the full zone. dig supports supports both.

[ Parent | on HN ]