Script dns-nsid

Script types: portrule
Categories: discovery, default, safe
Download: https://svn.nmap.org/nmap/scripts/dns-nsid.nse

Script Summary

Retrieves information from a DNS nameserver by requesting its nameserver ID (nsid) and asking for its id.server and version.bind values. This script performs the same queries as the following two dig commands: - dig CH TXT bind.version @target - dig +nsid CH TXT id.server @target

References: [1]http://www.ietf.org/rfc/rfc5001.txt [2]http://www.ietf.org/rfc/rfc4892.txt

Example Usage

nmap -sSU -p 53 --script dns-nsid <target>

Script Output

53/udp open  domain  udp-response
| dns-nsid:
|   NSID dns.example.com (646E732E6578616D706C652E636F6D)
|   id.server: dns.example.com
|_  bind.version: 9.7.3-P3

Requires

• dns
• nmap
• shortport
• stdnse
• string

---

Author:

• John R. Bond

License: Simplified (2-clause) BSD license--See https://nmap.org/svn/docs/licenses/BSD-simplified