Hi, and welcome to this new video!

This is the last video of the Web Exploitation series, and in this video we will discuss specifically an attack that can be done to the DNS protocol known as DNS zone transfer attack.

In this video I discuss the differences between virtual hosts, handled by the HTTP protocol, and domain names, handled by the DNS protocol. I then show how to perform a DNS zone transfer attack with the dig command by simulating a vulnerable environment with docker running bind9, an opensource DNS server implementation.

If you have any feedback, please let me know!



TIMESTAMP

00:00 Introduction
03:10 Difference between VHOST and DNS
07:55 What is a DNS zone transfer?
09:35 DNS zone transfer in practice
14:15 Final Overview
16:00 Conclusion



REFERENCES

Material: https://github.com/LeonardoE95/yten/...
OSCP repository: https://github.com/LeonardoE95/OSCP
BurpSuite Community Edition: https://portswigger.net/burp/communit...




CONTACTS

Blog: https://blog.leonardotamiano.xyz/
Github: https://github.com/LeonardoE95?tab=re...
Support: https://www.paypal.com/donate/?hosted...