{"id":463,"date":"2021-03-01T20:31:02","date_gmt":"2021-03-01T20:31:02","guid":{"rendered":"https:\/\/cas.cybercop-training.ch\/?page_id=463"},"modified":"2021-03-01T20:42:54","modified_gmt":"2021-03-01T20:42:54","slug":"a1-dns","status":"publish","type":"page","link":"https:\/\/cas.cybercop-training.ch\/index.php\/a1-dns\/","title":{"rendered":"A1: DNS"},"content":{"rendered":"

Assignment Series #A1 DNS<\/h1>\n

Task description<\/h2>\n

The command dig<\/code> is a tool for querying DNS nameservers for information about host addresses, mail exchanges, nameservers, and related information. This tool can be used from any Linux (Unix) or Macintosh OS X operating system. Please use dig<\/code> to solve the following tasks:<\/p>\n

    \n
  1. a record of www.microsoft.com<\/li>\n
  2. reverse lookup of the ip 80.254.178.110<\/li>\n
  3. a record of teams.microsoft.com via Google dns 8.8.8.8<\/li>\n
  4. ns records of ost.ch<\/li>\n
  5. mx records of ost.ch<\/li>\n
  6. zone transfer @nsztm1.digi.ninja zonetransfer.me<\/li>\n
  7. show dns trace when looking up hsr.hacking-lab.com domain<\/li>\n
  8. dns over http request via cloudflare of the hostname academy.hacking-lab.com<\/li>\n
  9. DS of the domain switch.ch<\/li>\n
  10. DNSKEY of the domain switch.ch<\/li>\n<\/ol>\n

    Solution<\/h2>\n
      \n
    1. \n

      a record of microsoft.com:<\/p>\n

      \n
      \n

      \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig -t a microsoft.com +short
      \n40.76.4.15
      \n40.112.72.205
      \n40.113.200.201
      \n13.77.161.179
      \n104.215.148.63<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

    2. \n

      reverse lookup of the ip 80.254.178.110<\/p>\n

      \n
      \n

      \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig -x 80.254.178.110 +short
      \n110-178-254-80.static.dsl-net.ch.<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

    3. \n

      a record of teams.microsoft.com via Google dns 8.8.8.8<\/p>\n

      \n
      \n

      ;; Query time: 12 msec
      \n;; SERVER: 8.8.8.8#53(8.8.8.8)
      \n;; WHEN: Tue Oct 20 16:11:22 EDT 2020
      \n;; MSG SIZE rcvd: 155<\/p>\n

      \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig @8.8.8.8 -t a teams.microsoft.com +short
      \nteams.office.com.
      \nteams-office-com.s-0005.s-msedge.net.
      \ns-0005.s-msedge.net.
      \n52.113.194.132<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

    4. \n

      ns records of ost.ch<\/p>\n

      \n
      \n

      \u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig -t ns ost.ch +short
      \ndns02.ost.ch.
      \ndns01.ost.ch.<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

    5. \n

      mx records of ost.ch<\/p>\n

      \n
      \n

      \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig -t mx ost.ch +short
      \n0 ost-ch.mail.protection.outlook.com.<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

    6. \n

      zone transfer @nsztm1.digi.ninja zonetransfer.me<\/p>\n

      \n
      \n

      \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
      \n\u2570\u2500 dig axfr @nsztm1.digi.ninja zonetransfer.me <\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n<\/ol>\n

      I decided to write only the command down instead of the full output. For a detailed explanation what this command does, please visit https:\/\/digi.ninja\/projects\/zonetransferme.php<\/a><\/p>\n

        \n
      1. \n

        show dns trace when looking up hsr.hacking-lab.com domain<\/p>\n

        \n
        \n

        \u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
        \n\u2570\u2500 dig +trace +short hsr.hacking-lab.com
        \nNS l.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS i.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS a.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS b.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS f.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS m.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS c.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS d.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS k.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS e.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS j.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS h.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nNS g.root-servers.net. from server 172.16.16.16 in 12 ms.
        \nA 152.96.6.131 from server 193.135.215.40 in 16 ms.<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

      2. \n

        dns over http request via cloudflare of the hostname academy.hacking-lab.com<\/p>\n

        \n

        Cloudflare DNS is 1.1.1.1<\/code>, but I wasn’t sure how to solve this task. I got stuck and tried this from the cloudfare developers guide out:
        \n        https:\/\/developers.cloudflare.com\/1.1.1.1\/dns-over-https\/json-format<\/a><\/p>\n

        \n

        curl -H ‚accept: application\/dns-json‘ ‚https:\/\/cloudflare-dns.com\/dns-query?name=academy.hacking-lab.com&type=AAAA<\/a>‚<\/p>\n<\/blockquote>\n<\/blockquote>\n

        \"\"<\/p>\n<\/li>\n

      3. \n

        ds of the domain switch.ch<\/p>\n

        \n
        \n

        \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS 9 \u2718 15s
        \n\u2570\u2500 dig ds switch.ch +short
        \n41243 13 2 7EB1BDE852B56AF1FB24B7018764BFA34D1E6A2A02F1338A40EF0A77 430F5607<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n

      4. \n

        DNS Key of the domain switch.ch<\/p>\n

        \n
        \n

        \u256d\u2500 ~\/Desktop\/Assignments\/A1\/DNS \u2714
        \n\u2570\u2500 dig DNSKEY switch.ch +short
        \n256 3 13 5TaAxIstxl3gVaGScS5L6Ccs4\/GZhqVUld5XHoEhlNJetxXBT5BPwAXA V2teG9sA9XBxNFAeD26ekts7OW6n+Q==
        \n257 3 13 COIkIJpWDaeEInm8UP+TKzg0H\/DEqtTUvjz3Os\/TK2biHlXtJL7sPrmw vw5QYP8f9hy9O2uBlotrhNR35SxX1g==
        \n256 3 13 wZLnkiai6vlaP\/gOxnhQdWZ21WPzIpkpCh5Uw1IFg276KJDkvJ\/RVZYh omttXiC1pv9hUCLLo0blRcWTILxAcQ==<\/p>\n<\/blockquote>\n<\/blockquote>\n<\/li>\n<\/ol>\n

        Notes<\/h2>\n

        I was unsure howto solve task 8. I did spend a lot of google time<\/code> to find a solution howto do that with dig<\/code> and decided now to upload this report with the curl command described in the cloudflare developers guide. Please let me know your solution for this task. I’m always eager to learn \ud83d\ude09<\/p>\n

        PDF Report
        \n        dns#1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

        Assignment Series #A1 DNS Task description The command dig is a tool for querying DNS nameservers for information about host addresses, mail exchanges, nameservers, and related information. This tool can be used from any Linux (Unix) or Macintosh OS X operating system. Please use dig to solve the following tasks: a record of www.microsoft.com reverse […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-463","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/comments?post=463"}],"version-history":[{"count":2,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/463\/revisions"}],"predecessor-version":[{"id":488,"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/pages\/463\/revisions\/488"}],"wp:attachment":[{"href":"https:\/\/cas.cybercop-training.ch\/index.php\/wp-json\/wp\/v2\/media?parent=463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}