**
Find all available DNS records for the “inlanefreight.htb” domain on the target name server and submit the flag found as a DNS record as the answer.
**
I’ve been stuck on this one for a few days now.
Here are my dns configs
Subbrute
Dig - Response is the same for every subdomain
ANY help would be greatly appreciated!
Hi, try adding an /etc/hosts entry with each subdomain you want to use.
E.g. ns1.inlanefreight.htb
Hope this helps, Mika
Yup! Got it later the same day!
I’ve seen the same thing on the .com domain, but this is a flag from something else.
So dont stray into other domains, the question specifically asks for the “inlanefreight.HTB” domain.
You were supplied with a IP address, what does this host do? Hint: As MikolasCage said before, use the /etc/hosts file for EACH subdomain.
The rest is up to you, good luck 
Yup! Got it the same day. This is my subbrute command. SPOILERS
./subbrute.py inlanefreight.htb -s ./names.txt -r ./resolvers.txt
Thank you! I got it the same day, felt so dumb afterwards, but hey, that’s the learning experience!
I feel dumber. I have tried EVERYTHING on these forums, yet I keep getting a connection timeout. I get all the subdomains, I modified the /etc/hosts file, tried like hundreds of combinations of dig (dig axfr/AXFR/ANY/TXT) and nothing, I want to believe there’s something wrong with my pwnbox because honestly it has been like 2 days and nothing shows up what do I do 
It’s just because, this is proably the worst skill assessment ever made by this platform, I just lose less than an hour to solve it, but it has nothing to do with learning
I am still looking for a solution, where can we be going wrong?
Brute forcing is the worst part of HTB Academy.
It takes too much time.
echo "ns1.inlanefreight.htb" > ./resolvers.txt
./subbrute.py inlanefreight.htb -s ./names.txt -r ./resolvers.txt
#Then
dig axfr @<IP> xx.inlanefreight.htb
This was it, thank you
my subbrute.py is taking too long.Is that normal?
hi, i tried to use this command but it keep sending an code errors:
/home/xman/subbrute/./subbrute.py:462: SyntaxWarning: invalid escape sequence ‘.’
permute_filter = re.compile(“[1]{” + str(self.permute_len) + “}.”)
Warning: Fewer than 16 resolvers per process, consider adding more nameservers to resolvers.txt.
Warning: No nameservers found, trying fallback list.
Process lookup-3:
Traceback (most recent call last):
File “/usr/lib/python3.12/multiprocessing/process.py”, line 314, in _bootstrap
self.run()
File “/home/xman/subbrute/./subbrute.py”, line 422, in run
response = self.check(hostname, query_type, timeout_retries)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/home/xman/subbrute/./subbrute.py”, line 342, in check
resp = self.resolver.query(host)
^^^^^^^^^^^^^^^^^^^^^^^^^
File “/home/xman/subbrute/./subbrute.py”, line 57, in query
name_server = self.get_ns()
^^^^^^^^^^^^^
File “/home/xman/subbrute/./subbrute.py”, line 107, in get_ns
ret = self.nameservers[self.pos]
~~~~~~~~~~~~~~~~^^^^^^^^^^
IndexError: list index out of range
^Zzsh: killed ./subbrute.py inlanefreight.htb -s ./names.txt -r ./resolvers.txt
can any one help?
a-zA-Z0-9 ↩︎
For those who are stuck on this problem
Then you’ll get a flag
Guys, if you’re stuck on this task, the IP address provided in the task is the domain zone server for the domain inlanefreight.htb. First, add the IP address to the resolvers.txt file, then perform enumeration using: ./subbrute.py inlanefreight.htb -s ./names.txt -r ./resolvers.txt
and after dig AXFR **.inlanefreight.htb @10.129.238.58
i did it like from last 15 mins its just showing a single thine i.e. inlanefreight.htb am i doing something wrong or it is usual for it to take too long
even after 1 hr i am not getting anything