PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-29 02:49:01 +00:00
Code Issues Projects Releases Wiki Activity

Make dns-nsec-enum and dns-nsec3-enum reference each other.

Browse Source
This commit is contained in:
david
2012-12-29 15:25:41 +00:00
parent 83f9cf53c1
commit d24ab2d43c
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
scripts/dns-nsec-enum.nse
View File

@@ -13,7 +13,8 @@ increased indentation.
The NSEC response record in DNSSEC is used to give negative answers to
queries, but it has the side effect of allowing enumeration of all
names, much like a zone transfer. This script doesn't work against
servers that use NSEC3 rather than NSEC.
servers that use NSEC3 rather than NSEC; for that, see
<code>dns-nsec3-enum</code>.
]]
---

3
scripts/dns-nsec3-enum.nse
View File

@@ -44,6 +44,9 @@ k7i4ekvi22ebrim5b6celtaniknd6ilj vulpix.example.com.
found 2 private NSEC3 names (25%) using 35017190 hash computations
</code>
Use the <code>dns-nsec-enum</code> script to handle servers that use NSEC
rather than NSEC3.
References:
* http://dnscurve.org/nsec3walker.html
]]