Cheatography
                https://cheatography.com
            
        
        
    
                   
                            
    
                    A cheat sheet on sub-domain enumeration techniques
                    
                 
                    
        
        
            
    
        
                            
        
                
        
            
                                
            
                
                                                |  |  | Zone walking - NSEC
                        
                                                                                    
                                                                                            | ldns-walk @<nameserver> <domain> |  
                                                                                            | ldns-walk @ns1.insecuredns.com insecuredns.com
 |  Installing ldns utilities sudo apt-get install ldnsutils # On Ubuntu/Debian
 yum install ldns # On Redhat/CentOS
 Zone transfer
                        
                                                                                    
                                                                                            | dig AXFR @<nameserver> <domain> |  
                                                                                            | dig AXFR @ns1.insecuredns.com insecuredns.com
 |  |  | Zone walking - NSEC3 - nsec3walker
                        
                                                                                    
                                                                                            | ./collect insecuredns.com > insecuredns.com.collect
 |  
                                                                                            | ./unhash < insecuredns.com.collect > insecuredns.com.unhash
 |  Calculating NSEC3 hash for a domain
                        
                                                                                    
                                                                                            | ldns-nsec3-hash -t <iterations> -s <salt> <domain> |  
                                                                                            | ldns-nsec3-hash -t 10 -s 1A2B3C4D5E6F  myzone.example.com
 |  | 
            
                            
            
            
        
        
        
        
        
            
    
        
          
Created By
Metadata
Favourited By
Comments
No comments yet. Add yours below!
Add a Comment
Related Cheat Sheets