Score:0

Dig only able to do zone transfers when +nocookie flag is enabled

es flag

I am learning about DNS enumeration and I am working on a lab exercise at the moment. To do a zone transfer, I entered the following:

dig @10.83.185.5 example.com AXFR

the result is

;; global options: +cmd
; Transfer failed.

However, when I add the +nocookie flag ie:

dig @10.83.185.5 example.com AXFR +nocookie

The zone transfer is successful. While I know that +nocookie forces not sending cookies, what I want to know is why does sending cookies result in a blank response, and should I be checking both sending with and without cookies whenever I'm enumerating DNS servers?

Also, is there a way to disable cookies with nslookup?

Patrick Mevzek avatar
cn flag
1) your case is very odd, it seems the server is not handling EDNS0 which means it is very old. What it is? You should look or ask someone at the logfiles of this server 2) `dig` is superior to `nslookup`, hence don't bother with `nslookup`.
Patrick Mevzek avatar
cn flag
Small nitpicks: "I'm enumerating DNS servers" is not exactly what you are doing. An `AXFR` query, if allowed by the server you are contacting, gives you back the full content of the zone, hence allows you enumerate all resource records existing in the zone (also please use `example.com` as a zone example and not something else, I have edited your question in that regard, see RFC2606 for details)
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.