Knowledge Hub
DNS Manipulation
TryHackMe14 answered prompts
DNS Manipulation TryHackMe walkthrough with 14 answered prompts.
Prompts and answers
-
If you were on Windows, what command could you use to query a txt record for 'youtube.com'?
nslookup -type=txt youtube.com
-
If you were on Linux, what command could you use to query a txt record for 'facebook.com'?
dig facebook.com TXT
-
AAAA stores what type of IP Address along with the hostname?
IPv6
-
Maximum characters for a DNS TXT Record is 256. (Yay/Nay)
Nay
-
What DNS Record provides a domain name in reverse-lookup? (Research)
PTR
-
What would the reverse-lookup be for the following IPv4 Address? (192.168.203.2) (Research)
2.203.168.192.in-addr.arpa
-
What is the maximum length of a DNS name? (Research) (Length includes dots!)
253
-
What is the Transaction name? (Type it as you see it)
Network Equip.
-
How much was the Firewall? (Without the $)
2500
-
Which file contains suspicious DNS queries?
cap3.pcap
-
Enter the plain-text after you have decoded the data using packetyGrabber.py found in ~/dns-exfil-infil/ folder.
administrator:s3cre7P@ssword
-
What type of DNS Record is usually used to infiltrate data into a network?
TXT
-
Enter the output from the executed python file
4.4.0-186-generic
-
What program was used to Tunnel HTTP over DNS?
iodine