Hi there,
pertaining to this question “Interact with the target DNS using its IP address and enumerate the FQDN of it for the “inlanefreight.htb” domain” I have been stuck on it for about a week! My understanding is that an FQDN consists of (minus the square brackets):
[hostname].[subdomain].[domain].[topleveldomain][.]
I tried:
dig with various flag options eg ns, ptr, any, -x 10.129.240.7 +short
dnsenum tool however this failed because of this error 10.129.240.7 NS record query failed: NXDOMAIN
Further steps I tried were:
#added the domain name and ip address to the /etc/hosts
10.129.70.198 inlanefreight.htb
#added the ip address as a nameserver in the /etc/resolv.conf file
nameserver 10.129.70.198
Repeated the above commands to no avail. Also tried commenting out the above configuration settings. I just don’t understand how I can get an FQDN from an ip address! please explain to me if I have misunderstood the question and any hints would be appreciated.
Pertaining to "What is the FQDN of the host where the last octet ends with “x.x.x.203"”? I have read the other forum posts on this. I have gone through most of the scripts in the directory /usr/share/seclists/Discovery/DNS and have not found the host with the ip address x.x.x.203. Any hints would be appreciated.
Note I have answered successfully the questions about zone transfers. The below tutorial was very helpful: