From d24ab2d43c73386cb74775145c440be921a4f403 Mon Sep 17 00:00:00 2001 From: david Date: Sat, 29 Dec 2012 15:25:41 +0000 Subject: [PATCH] Make dns-nsec-enum and dns-nsec3-enum reference each other. --- scripts/dns-nsec-enum.nse | 3 ++- scripts/dns-nsec3-enum.nse | 3 +++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/scripts/dns-nsec-enum.nse b/scripts/dns-nsec-enum.nse index 54cdd40a8..9f278c49f 100644 --- a/scripts/dns-nsec-enum.nse +++ b/scripts/dns-nsec-enum.nse @@ -13,7 +13,8 @@ increased indentation. The NSEC response record in DNSSEC is used to give negative answers to queries, but it has the side effect of allowing enumeration of all names, much like a zone transfer. This script doesn't work against -servers that use NSEC3 rather than NSEC. +servers that use NSEC3 rather than NSEC; for that, see +dns-nsec3-enum. ]] --- diff --git a/scripts/dns-nsec3-enum.nse b/scripts/dns-nsec3-enum.nse index dc6bb8970..46d8f508f 100644 --- a/scripts/dns-nsec3-enum.nse +++ b/scripts/dns-nsec3-enum.nse @@ -44,6 +44,9 @@ k7i4ekvi22ebrim5b6celtaniknd6ilj vulpix.example.com. found 2 private NSEC3 names (25%) using 35017190 hash computations +Use the dns-nsec-enum script to handle servers that use NSEC +rather than NSEC3. + References: * http://dnscurve.org/nsec3walker.html ]]