rodney-o-c-melby/dns-zone-transfer-testAutomates Domain Name System (DNS) zone transfer testing. Checks for CVE-1999-0532 by automatically finding a given domains nameservers, and tests for zone transfers, if successful, subdomains are printed to standard output.
Automates Domain Name System (DNS) zone transfer testing.
Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output.
dztt zonetransfer.me
dztt -f domains.txt
dztt -n 1.1.1.1 zonetransfer.me
git >= 2.36.0
python >= 3.9
pip >= 20.3.4
Ensure system packages in requirements are installed, Download the repository.
sudo pacman -Syu git python pip | sudo apt install git python pip
git clone https://github.com/Rodney-O-C-Melby/zone-transfer-tester.git
Install pip dependancies, and run program.
pip install dnspython
python dns-zone-transfer-test/src/dns-zone-transfer-test/dztt
Or create a virtual enviroment, install pip dependancies into virtual enviroment, run program from virtual enviroment.
python -m venv test
test/bin/pip install dnspython
test/bin/python dns-zone-transfer-test/src/dns-zone-transfer-test/dztt
Download the repository change to the relevant directory, and install the PIP package.
git clone https://github.com/Rodney-O-C-Melby/zone-transfer-tester.git
cd dns-zone-transfer-test
pip install .
Then add the python scripts directory to your PATH environment variable.
python get_scripts_path.py
Add the output to PATH or only use dztt within this directory using:
python src/dns-zone-transfer-test/dztt
usage: dztt [-h] [-f FILE] [-n NAMESERVER] target
DNS Zone Transfer Test: dztt tests IP's or domains for zone transfers. (XFR)
positional arguments:
target Target IP or Domain name to test
options:
-h, --help show this help message and exit
-f FILE, --file FILE file of domain names to test, one per line
-n NAMESERVER, --nameserver NAMESERVER
DNS IP for target DNS query, defaults to local DNS
### EXAMPLES ###
dztt
dztt zonetransfer.me
dztt -f domains.txt
dztt -n 1.1.1.1 zonetransfer.me
dztt -f domains.txt -n 1.1.1.1
A domain that is vulnerable to zone transfers will print the following message to standard out, and print each identified subdomain.
zonetransfer.me is VULNERABLE to DNS Zone Transfers!!!
Found 34 subdomains at zonetransfer.me
A domain that is not vulnerable to zone transfers will print the following message to standard out.
nmap.org is SECURE against DNS Zone Transfers :-)
or
nmap.org is VERY SECURE against DNS Zone Transfers :-)
Accepts a file containing domain names to test, one per line.
dztt -f domains.txt
dnspython >= 2.2.1