Description: DNS Zone Transfer is generally used for DNS database replications and backups. In this video we will look at how a DNS Zone Transfer can be done using the Dig utility. An interesting point which we will see is that not all DNS servers are configured to allow DNS zone transfers to any public request for a transfer. The DNS Zone transfer is also sometimes symbolized with the opcode mnemonic AXFR, which is the DNS transaction type used to signify a DNS Zone Transfer. Links:<br><br>1. DNS Basics<br><br>2. DIG usage from Linux.com<br><br>
Tags: tools ,
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
"dig google.com" along with "dig google.com +additional" and "dig google.com +all" doesn't show the "ADDITIONAL" section that your command outputs. I just have "QUESTION SECTION" and "ANSWER SECTION". What digs?
Hello Vivek!
I think that there might be something wrong with my dig program. When I try to dig google.com I cant find any name servers. here is what my dig program on "Kali Linux" prints out:
(One second...) I will post it from my VM...
root@kali:~# dig google.com
; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3605
;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 5 IN A 173.194.32.32
google.com. 5 IN A 173.194.32.41
google.com. 5 IN A 173.194.32.33
google.com. 5 IN A 173.194.32.34
google.com. 5 IN A 173.194.32.46
google.com. 5 IN A 173.194.32.37
google.com. 5 IN A 173.194.32.36
google.com. 5 IN A 173.194.32.39
google.com. 5 IN A 173.194.32.38
google.com. 5 IN A 173.194.32.35
google.com. 5 IN A 173.194.32.40
;; Query time: 29 msec
;; SERVER: 172.16.185.2#53(172.16.185.2)
;; WHEN: Sun Jun 16 19:30:38 2013
;; MSG SIZE rcvd: 204
root@kali:~#
I have problems with "dig" on other domains to. I get no information. Please, could someone be kind to help me if you know the reason behind this? Thank you.