--- 工具名稱: dnstracer 所屬分類: Information Gathering 標簽: [dns,kali linux,dnstracer,information gathering,recon] 創建時間: 2016-10-21 09:37:00 --- 0x00 dnstracer介紹 ------------- dnstracer用于獲取給定主機名從給定域名服務器（DNS）的信息，并跟隨DNS服務器鏈得到權威結果。 工具來源：http://www.mavetju.org/unix/general.php [dnstracer主頁][1] | [Kali dnstracer Repo倉庫][2] - 作者：Edwin Groothuis - 證書：BSD 0x01 dnstracer功能 --------------- dnstracer - 跟蹤到源的DNS查詢工具 ```shell root@kali:~# dnstracer DNSTRACER version 1.8.1 - (c) Edwin Groothuis - http://www.mavetju.org 用法: dnstracer [選項] [主機名] -c: 禁用本地緩存,默認啟用 -C: 啟用負緩存，默認禁用 -o: 啟用返回結果的概述，默認禁用 -q <querytype>: DNS請求查詢類型，默認為A -r <retries>: DNS請求的重試次數，默認值3 -s <server>: 使用此服務器的初始請求，默認localhost，如果指定將使用A.ROOT-SERVERS.NET -t <maximum timeout>: 限制每次嘗試等待的時間 -v: 顯示詳細 -S <ip address>: 使用這個IP作為源地址 -4: 不查詢IPv6服務器 ``` <!--more--> 0x02 dnstracer用法示例 ----------------- ```shell root@kali:~# dnstracer -q mx -r 1 -t 10 -v www.harvard.edu Tracing to www.harvard.edu[#mx] via 192.168.219.2, maximum of 1 retries 192.168.219.2 (192.168.219.2) IP HEADER - Destination address: 192.168.219.2 DNS HEADER (send) - Identifier: 0x351F - Flags: 0x00 (Q ) - Opcode: 0 (Standard query) - Return code: 0 (No error) - Number questions: 1 - Number answer RR: 0 - Number authority RR: 0 - Number additional RR: 0 QUESTIONS (send) - Queryname: (3)www(7)harvard(3)edu - Type: 15 (unknown) - Class: 1 (Internet) DNS HEADER (recv) - Identifier: 0x351F - Flags: 0x8080 (R RA ) - Opcode: 0 (Standard query) - Return code: 0 (No error) - Number questions: 1 - Number answer RR: 1 - Number authority RR: 5 - Number additional RR: 4 QUESTIONS (recv) - Queryname: (3)www(7)harvard(3)edu - Type: 15 (unknown) - Class: 1 (Internet) ANSWER RR - Domainname: (3)www(7)harvard(3)edu - Type: 5 (CNAME) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 36 - Resource data: (3)www(7)harvard(3)edu(3)cdn(10)cloudflare(3)net AUTHORITY RR - Domainname: (10)cloudflare(3)net - Type: 2 (NS) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 6 - Resource data: (3)ns3(10)cloudflare(3)net AUTHORITY RR - Domainname: (10)cloudflare(3)net - Type: 2 (NS) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 6 - Resource data: (3)ns2(10)cloudflare(3)net AUTHORITY RR - Domainname: (10)cloudflare(3)net - Type: 2 (NS) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 6 - Resource data: (3)ns1(10)cloudflare(3)net AUTHORITY RR - Domainname: (10)cloudflare(3)net - Type: 2 (NS) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 6 - Resource data: (3)ns5(10)cloudflare(3)net AUTHORITY RR - Domainname: (10)cloudflare(3)net - Type: 2 (NS) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 6 - Resource data: (3)ns4(10)cloudflare(3)net ADDITIONAL RR - Domainname: (3)ns3(10)cloudflare(3)net - Type: 28 (unknown) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 16 - Resource data: 2400:cb00:2049:0001:0000:0000:c629:de1f ADDITIONAL RR - Domainname: (3)ns3(10)cloudflare(3)net - Type: 1 (A) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 4 - Resource data: 198.41.222.31 ADDITIONAL RR - Domainname: (3)ns2(10)cloudflare(3)net - Type: 28 (unknown) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 16 - Resource data: 2400:cb00:2049:0001:0000:0000:c629:de83 ADDITIONAL RR - Domainname: (3)ns2(10)cloudflare(3)net - Type: 1 (A) - Class: 1 (Internet) - TTL: 5 (5s) - Resource length: 4 - Resource data: 198.41.222.131 Got answer [received type is cname] |\___ ns3.cloudflare.net [cloudflare.net] (2400:cb00:2049:0001:0000:0000:c629:de1f) IP HEADER - Destination address: XXX DNS HEADER (send) - Identifier: 0x303A - Flags: 0x00 (Q ) - Opcode: 0 (Standard query) - Return code: 0 (No error) - Number questions: 1 - Number answer RR: 0 - Number authority RR: 0 - Number additional RR: 0 QUESTIONS (send) - Queryname: (3)www(7)harvard(3)edu - Type: 15 (unknown) - Class: 1 (Internet) send_data/sendto: Network is unreachable ``` [1]: http://freshmeat.net/projects/dnstracer [2]: http://freshmeat.net/projects/dnstracer