This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
-
Updated
Feb 5, 2019 - Python
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain
NSEC3 Zone Walker
NSEC[3] Walking for DNSSEC
Browser-based DNSSEC demo — DNSKEY/DS/RRSIG chain validation from root trust anchor to zone using algorithms 13 and 15, with authenticated denial per RFC 5155, RFC 4470 and RFC 7129. Walk a whole zone out of NSEC proofs that all validate, then watch NSEC3 make it an offline guessing problem.
To associate your repository with the nsec3 topic, visit your repo's landing page and select "manage topics."