Academy: Attacking Common Services | Attacking DNS

78

That was helpful, thank you

1 Like
80

Guys, if you added ns1.inlanefreight.htb to your /etc/hosts and it’s still not working just reset your pwnbox and your machine.

81

I am sure follow the every step correct, but don’t works.

Spoiler

cat /etc/hosts
10.129.102.81 inlanefreight.htb
10.129.102.81 hr.inlanefreight.htb
10.129.102.81 helpdesk.inlanefreight.htb
10.129.102.81 ns.inlanefreight.htb
10.129.102.81 control.inlanefreight.htb

in Subbrute directory

root@htb-0pmhlcqwib:/home/htb-ac-994625/Downloads/subbrute# cat resolvers.txt 
inlanefreight.htb

Spoiler

root@htb-0pmhlcqwib:/home/htb-ac-994625/Downloads/subbrute# ./subbrute.py inlanefreight.htb -s ./names.txt -r ./resolvers.txt
Warning: Fewer than 16 resolvers per process, consider adding more nameservers to resolvers.txt.
inlanefreight.htb
hr.inlanefreight.htb
helpdesk.inlanefreight.htb
ns.inlanefreight.htb
control.inlanefreight.htb

Spoiler

dig AXFR @ns.inlanefreight.htb 10.129.102.81

; <<>> DiG 9.18.28-1~deb12u2-Debian <<>> AXFR @ns.inlanefreight.htb 10.129.102.81
; (1 server found)
;; global options: +cmd
; Transfer failed.

Same messages for every subdomain.

82

is not ns1.

83

This has to be the most frustrating lab I’ve done in awhile. Why do they have to be so cryptic? I added the IP address and then inlanefreight.htb to my /etc/hosts file. Nothing is working. I keep seeing people saying ns1.inlanefreight.htb, but I can’t even find that as every tool I run against inlanefreight.htb results in an error. I understand it’s important to get stuck, but this just seems like they’re wasting a lot of people’s time for no reason, and charging us for it.