Skip to content

Information Disclosure: DNS Zone Transfer Allowed to Any Client

Identifier: dns_zone_transfer_any

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

DNS zone transfers exposed to any client can disclose internal hostnames and infrastructure details.

How we test: We attempt AXFR zone transfers against authoritative DNS servers and report the issue when a server returns zone data to an unauthenticated client.

Configuration

Example

Example configuration:

---
security_tests:
  dns_zone_transfer_any:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.