full-disclosure - Re: DNS mining ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 10 Apr 2007 16:59:46 -0400
From: Valdis.Kletnieks@...edu
To: Maxim Veksler <hq4ever@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: DNS mining ?

On Tue, 10 Apr 2007 22:37:12 +0200, Maxim Veksler said:
> On 4/9/07, Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu> wrote:
> > and other ways to get lists of things like "everything
> > in *.com".  So "never published" does *not* equate directly to "not findable".
> >
> 
> OK, that is not practical. Scanning the whole DNS range for *.com of
> what ever will taken a considerably long time.

Who said you *scan* the whole DNS range?  It's at least theoretically
possible to just FTP the whole DNS Zone file for .com, after jumping
through a few paperwork hoops.  Of course, it's up there in the gigabyte
range - 120M SOA and NS records take some space. :)

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/