Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Network Analysis - DNS Zone Transfer Leak
Mission
An unauthenticated DNS zone transfer (AXFR) against a misconfigured authoritative server was captured. Download the packet capture (traffic.pcap), analyze the TXT records in the transferred internal zone, and recover the flag.
Hints
Hint 1 Show
AXFR runs over TCP/53; dns.qry.type == 252 is the zone-transfer request
Hint 2 Show
Enumerate the TXT records in the response; SPF/DMARC/google-site-verification are decoys
Hint 3 Show
The value of the _admin-note.corp.internal TXT record is the flag