Footprinting → DNS
I’m not sure where I’m going wrong. Any help would be much appreciated.
→ Local DNS Configuration
┌─[eu-academy-2]─[10.10.14.170]─[htb-ac709620@htb-rynjgej7uu]─[/]
└──╼ [★]$ cat /etc/bind/named.conf.local
cat: /etc/bind/named.conf.local: No such file or directory
→ DIG - AXFR Zone Transfer
┌─[eu-academy-2]─[10.10.14.170]─[htb-ac709620@htb-rynjgej7uu]─[/]
└──╼ [★]$ dig axfr inlanefreight.htb @10.129.14.128
;; Connection to 10.129.14.128#53(10.129.14.128) for inlanefreight.htb failed: host unreachable.
→ DIG - AXFR Zone Transfer - Internal
┌─[eu-academy-2]─[10.10.14.170]─[htb-ac709620@htb-rynjgej7uu]─[/]
└──╼ [★]$ dig axfr internal.inlanefreight.htb @10.129.14.128
;; Connection to 10.129.14.128#53(10.129.14.128) for internal.inlanefreight.htb failed: timed out.
;; Connection to 10.129.14.128#53(10.129.14.128) for internal.inlanefreight.htb failed: timed out.
; <<>> DiG 9.16.33-Debian <<>> axfr internal.inlanefreight.htb @10.129.14.128
;; global options: +cmd
;; connection timed out; no servers could be reached
;; Connection to 10.129.14.128#53(10.129.14.128) for internal.inlanefreight.htb failed: timed out.
→ Subdomain Brute Forcing
┌─[eu-academy-2]─[10.10.14.170]─[htb-ac709620@htb-rynjgej7uu]─[/]
└──╼ [★]$ for sub in $(cat /opt/useful/SecLists/Discovery/DNS/subdomains-top1million-110000.txt);do dig $sub.inlanefreight.htb @10.129.14.128 | grep -v ';\|SOA' | sed -r '/^\s*$/d' | grep $sub | tee -a subdomains.txt;done
tee: subdomains.txt: Permission denied
tee: subdomains.txt: Permission denied
........