[置顶] 安全参透之旅第2章 fierce工具使用

root@kali:~# fierce -dns cloudcentrics.com
DNS Servers for cloudcentrics.com:
        dns2.name-services.com
        dns3.name-services.com
        dns4.name-services.com
        dns5.name-services.com
        dns1.name-services.com


Trying zone transfer first...
        Testing dns2.name-services.com
                Request timed out or transfer not allowed.
        Testing dns3.name-services.com
                Request timed out or transfer not allowed.
        Testing dns4.name-services.com
                Request timed out or transfer not allowed.
        Testing dns5.name-services.com
                Request timed out or transfer not allowed.
        Testing dns1.name-services.com
                Request timed out or transfer not allowed.


Unsuccessful in zone transfer (it was worth a shot)
Okay, trying the good old fashioned way... brute force


Checking for wildcard DNS...
        ** Found 96446437507.cloudcentrics.com at 8.5.1.45.
        ** High probability of wildcard DNS.
Now performing 2280 test(s)...


用指定了字典的话，Fierce会尝试暴力枚举区域传送。因为本节目的是决定该域中都有哪些主机。
现在可以瞄准特定主机，用类似Nmap这样的工具来仔细测试目的，使用Fierce好处可以减少网络
流量，避免被发现。