Re: anonymous Zonetransfer (AXFR) exploatation

LordDoskias wrote:

The best thing that I can think if to use the information obtained from the zone transfer. Perhaps some "private" hosts will come up that you can look into? To my mind AXFR transfers should be considered as part of the reconnaissance stage of a pen-test.


Actually, they were, a long time ago.


------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages