Zone transfert

[othman.bouayad 80]

Hi,

Zone transfert is an effective technique to get informations on a domain and its records;

I was wondering if performing zone transferts on dns servers that don't belong to the target organization is legal ?

For instance, let's say i have an agreement with the "foo" company for a penetration test, can i get in trouble if i make a zone transfert for the zone foo.com on an authoritative name server belonging to their hosting company ?

I checked online resources and it seems there is some kind of grey area about this subject.

 

Best regards,

 

[Anuj Sharma 5]

I think it would depend on country to country. You'll have to study the cyber law in your state/country to find this out.