Skip to content

Instantly share code, notes, and snippets.

@Habbie

Habbie/bad

Created February 26, 2019 11:40
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Habbie/076daf6c206029aaeae5e01cc4118e60 to your computer and use it in GitHub Desktop.
Save Habbie/076daf6c206029aaeae5e01cc4118e60 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
bad
[peter:~/tmp] 4s 130 $ nsec3dig 77.79.212.238 53 etop.pl ds
Reply to question for qname='etop.pl', qtype=DS
Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
1 pl. IN SOA 3600 a-dns.pl. dnsmaster.nask.pl. 1551164423 900 300 2592000 3600
1 pl. IN RRSIG 3600 SOA 8 1 86400 20190328113614 20190226103614 54420 pl. 0vOPiQdsEm75fDPKvwQVSAtW9iFTsEBE+Dwzn/H6HQD9KdrvtXyX1rGgysFcShKUx9UnBU243KUSw7MNXhRnUXDTLmaUVanctA/NJOyXNI3oJswbU+zik4noxWxd4QKMhf03Z/lmdfjEFES6szIO6uQAWxGPAzPsOkiDhyCJyMU=
1 0uniam1kpu5vmh1be68c09a2sdsnuct3.pl. IN NSEC3 3600 1 1 12 6b566991392a2cb60ed7 0UNQQ4K5247RSGHJ250LH6O8R90O6TPC NS SOA TXT RRSIG DNSKEY NSEC3PARAM
1 0uniam1kpu5vmh1be68c09a2sdsnuct3.pl. IN RRSIG 3600 NSEC3 8 2 3600 20190327120000 20190225120000 54420 pl. nd7NFCydv7xyUr4APn1RI8Lu+K9wlpL17HZKylC+CtXwz7ezH/Mus3VEeVfAfZlPuvDLV6zFWjY9/srm3jMESiPoV3LQwDWzYtN6JH/FhVL8AbNVJ4bTDd3dSGRLqCjAgCh005sxVUO9Gep5W0XdLtDVHxGWT0FhxapHKjHOvJs=
1 sekm7vn65k2btddbuu3qt3s17jrej0h5.pl. IN NSEC3 3600 1 1 12 6b566991392a2cb60ed7 SEL2I7KMRJI8T0KRAVQPQF38QRGIFGF4 NS DS RRSIG
1 sekm7vn65k2btddbuu3qt3s17jrej0h5.pl. IN RRSIG 3600 NSEC3 8 2 3600 20190327120000 20190225120000 54420 pl. N540iewzneRzDh7kMChsx+KbpcIMGjXHfe0tU8O0BqbdhDVJ/pbwTRM8LnCvcx02fLXwHz2x9hbs1mLtio3gtepGBEAuc3bYgpTZjbdTArG8B1cbS8bZTnXx8Cw3+rjwjp8LGAUKEq+chDtCI2XUEGNSs2uKxUWTzjjy2/EBwqs=
2 . IN OPT 32768
== nsec3 prove/deny report follows ==
pl. (0uniam1kpu5vmh1be68c09a2sdsnuct3) proven by base of 0uniam1kpu5vmh1be68c09a2sdsnuct3..0unqq4k5247rsghj250lh6o8r90o6tpc
found closest encloser at pl.
next closer is etop.pl.
next closer (etop.pl.) NOT denied
wildcard at encloser (*.pl.) is NOT denied or proven
Raw
good
[peter:~/tmp] $ nsec3dig 46.28.245.82 53 etop.pl ds
Reply to question for qname='etop.pl', qtype=DS
Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
1 0UNIAM1KPU5VMH1BE68C09A2SDSNUCT3.pl. IN NSEC3 3600 1 1 12 6b566991392a2cb60ed7 0UNQQ4K5247RSGHJ250LH6O8R90O6TPC NS SOA TXT RRSIG DNSKEY NSEC3PARAM
1 0UNIAM1KPU5VMH1BE68C09A2SDSNUCT3.pl. IN RRSIG 3600 NSEC3 8 2 3600 20190327120000 20190225120000 54420 pl. nd7NFCydv7xyUr4APn1RI8Lu+K9wlpL17HZKylC+CtXwz7ezH/Mus3VEeVfAfZlPuvDLV6zFWjY9/srm3jMESiPoV3LQwDWzYtN6JH/FhVL8AbNVJ4bTDd3dSGRLqCjAgCh005sxVUO9Gep5W0XdLtDVHxGWT0FhxapHKjHOvJs=
1 pl. IN SOA 3600 a-dns.pl. dnsmaster.nask.pl. 1551164423 900 300 2592000 3600
1 pl. IN RRSIG 3600 SOA 8 1 86400 20190328113614 20190226103614 54420 pl. 0vOPiQdsEm75fDPKvwQVSAtW9iFTsEBE+Dwzn/H6HQD9KdrvtXyX1rGgysFcShKUx9UnBU243KUSw7MNXhRnUXDTLmaUVanctA/NJOyXNI3oJswbU+zik4noxWxd4QKMhf03Z/lmdfjEFES6szIO6uQAWxGPAzPsOkiDhyCJyMU=
1 IKEM9T5KBA7P7O9PJ7RJM18FK8AAUHBO.pl. IN NSEC3 3600 1 1 12 6b566991392a2cb60ed7 IKERLIQ6KMHIC9R1B9IM46TERQVD504R NS DS RRSIG
1 IKEM9T5KBA7P7O9PJ7RJM18FK8AAUHBO.pl. IN RRSIG 3600 NSEC3 8 2 3600 20190327120000 20190225120000 54420 pl. sLSGVGQCVDncVbNsxg4hTfXbDPN4yGEyPCpKEoevLRq5wVmbi8QiDJdjHMbur4q2TTneA5o9aNwKPo65So7xwkMT6vllBXLGO6BNXWnY2k3PiKOpw+WQiIQ7ddsa5tJ3+Htg8TKGu2ixF/Xd4L8rD5xW4KxwC6JkZxtKmPbEvqE=
2 . IN OPT 32768
== nsec3 prove/deny report follows ==
pl. (0uniam1kpu5vmh1be68c09a2sdsnuct3) proven by base of 0uniam1kpu5vmh1be68c09a2sdsnuct3..0unqq4k5247rsghj250lh6o8r90o6tpc
etop.pl. (ikepbte6aiuhut9mt7cgnj7nc9usj7gt) denied by ikem9t5kba7p7o9pj7rjm18fk8aauhbo..ikerliq6kmhic9r1b9im46terqvd504r
found closest encloser at pl.
next closer is etop.pl.
next closer (etop.pl.) is denied correctly
wildcard at encloser (*.pl.) is NOT denied or proven
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment