Dnstest

From SkullSecurity
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Intro

This program simply checks whether or not you have the authoritative nameserver for a given domain. It is implicitly called by the other dns* programs I've written, all it does is look up a random subdomain and see if the response comes back.

Usage

./dnstest --domain <domain>

 -h --help
    Help (this page).
 -d --domain <domain>
    The domain name to check. The lookup will be for [random].domain.
 --dns <server>
    Set the DNS server. Default: the system's first DNS server.
 -s --source <address>
    The local address to bind to. Default: any (0.0.0.0)
 -p --port <port>
    The local port to listen on. I don't recommend changing this.
    default: 53.
 --rport <port>
    The port to send the request to. Default: 53.
 -u --username
    Drop privileges to this user after opening socket (default: 'nobody')
 -V --version
    Print the version and exit

Example

There isn't really much to this program, but here's how it looks running on my laptop (which is the authoritative server for skullseclabs.org):

$ sudo ./dnstest
Listening for requests on 0.0.0.0:53
Sending request to 208.81.7.10:53
Trying to look up domain: avobwnjlopakgmdt.skullseclabs.org
Received a response: avobwnjlopakgmdt.skullseclabs.org
Contgratulations, you have the proper DNS server for this domain!