Difference between revisions of "DNSSEC"
From Hack Sphere Labs Wiki
(Created page with " dig @dnsserver domain.tld +dnssec No authoritative dnssec response means no DNSSEC employed at domain. You will see the keys. IE google.com has no DNSSEC on the domain upen...") |
|||
| Line 8: | Line 8: | ||
upenn.edu does | upenn.edu does | ||
| + | |||
| + | <pre> | ||
| + | dig +dnssec upenn.edu | ||
| + | |||
| + | ; <<>> DiG 9.6.2-P2 <<>> +dnssec upenn.edu | ||
| + | ;; global options: +cmd | ||
| + | ;; Got answer: | ||
| + | ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29811 | ||
| + | ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1 | ||
| + | |||
| + | ;; OPT PSEUDOSECTION: | ||
| + | ; EDNS: version: 0, flags: do; udp: 4096 | ||
| + | ;; QUESTION SECTION: | ||
| + | ;upenn.edu. IN A | ||
| + | |||
| + | ;; AUTHORITY SECTION: | ||
| + | upenn.edu. 1251 IN SOA assailants.net.isc.upenn.edu. hostmaster.upenn.edu. 1002092872 10800 3600 604800 3600 | ||
| + | upenn.edu. 1251 IN RRSIG SOA 5 2 3600 20120109192746 20111210182746 50475 upenn.edu. 09b8/qJl2E4O5gc63BRRCFrDzPLvwaZv+zPYUdWoFTNdZ8BoRbAtto+x BGAQOgPlVhWC8vIozWmed3J4KG74BcY1B4WaD+laiNg3rzKm2yBVorwC JXHyWIksF3/6uLeHWKf7w0DocYAtL5B8KtUuCjdRKN71qua/HqgHvGni 2u0= | ||
| + | upenn.edu. 1251 IN NSEC _kerberos.upenn.edu. NS SOA MX RRSIG NSEC DNSKEY TYPE65534 | ||
| + | upenn.edu. 1251 IN RRSIG NSEC 5 2 3600 20111225082135 20111125080254 50475 upenn.edu. LOlp2Zajrztv0rgpWPMdKsfZzdC74ovhHDiwRg1xm7P9yIXaoZCdw8s0 R/E5iEhQTXevOklrlJj4AOBqXlKW5/2coMto8eO/ryobX+qglRv8SHoB q9xHFDEVxgRZZyEnX8QTIr+SFtLKJy+D1HKR2hMBwkq4nUCl17diOXE2 vIo= | ||
| + | |||
| + | ;; Query time: 24 msec | ||
| + | ;; SERVER: 66.0.32.14#53(66.0.32.14) | ||
| + | ;; WHEN: Sat Dec 10 14:05:24 2011 | ||
| + | ;; MSG SIZE rcvd: 518 | ||
| + | </pre> | ||
Revision as of 12:07, 10 December 2011
dig @dnsserver domain.tld +dnssec
No authoritative dnssec response means no DNSSEC employed at domain. You will see the keys.
IE
google.com has no DNSSEC on the domain
upenn.edu does
dig +dnssec upenn.edu ; <<>> DiG 9.6.2-P2 <<>> +dnssec upenn.edu ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29811 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;upenn.edu. IN A ;; AUTHORITY SECTION: upenn.edu. 1251 IN SOA assailants.net.isc.upenn.edu. hostmaster.upenn.edu. 1002092872 10800 3600 604800 3600 upenn.edu. 1251 IN RRSIG SOA 5 2 3600 20120109192746 20111210182746 50475 upenn.edu. 09b8/qJl2E4O5gc63BRRCFrDzPLvwaZv+zPYUdWoFTNdZ8BoRbAtto+x BGAQOgPlVhWC8vIozWmed3J4KG74BcY1B4WaD+laiNg3rzKm2yBVorwC JXHyWIksF3/6uLeHWKf7w0DocYAtL5B8KtUuCjdRKN71qua/HqgHvGni 2u0= upenn.edu. 1251 IN NSEC _kerberos.upenn.edu. NS SOA MX RRSIG NSEC DNSKEY TYPE65534 upenn.edu. 1251 IN RRSIG NSEC 5 2 3600 20111225082135 20111125080254 50475 upenn.edu. LOlp2Zajrztv0rgpWPMdKsfZzdC74ovhHDiwRg1xm7P9yIXaoZCdw8s0 R/E5iEhQTXevOklrlJj4AOBqXlKW5/2coMto8eO/ryobX+qglRv8SHoB q9xHFDEVxgRZZyEnX8QTIr+SFtLKJy+D1HKR2hMBwkq4nUCl17diOXE2 vIo= ;; Query time: 24 msec ;; SERVER: 66.0.32.14#53(66.0.32.14) ;; WHEN: Sat Dec 10 14:05:24 2011 ;; MSG SIZE rcvd: 518
