Target 2: Exploiting Bifur

Reconnaissance

We know the IP address for shire.org is 10.0.5.22.

• this was found in the class activity 3.1 DNS enumeration from SEC-355

I re-made the DNS resolver script on my system to get the IP address for Bifur.

#!/bin/bash 
​
network=$1
DNS_Server=$2
​
for i in $(seq 1 254); do
  nslookup "$network.$i" "$DNS_Server" | grep "name ="
done
​

I then did the following to run the command:

• chmod +x dns-resolver

• sudo ./dns-resolver.sh 10.0.5 10.0.5.22