Reference no: EM133969462

Penetration Testing and Countermeasures

Social Engineering and DNS Security

Part A - Social Engineering Tasks
1. Discuss different social engineering techniques (phishing, shoulder surfing, dumpster diving, piggybacking).
2. Provide one real-world example of each and explain how the attack could have been prevented. Get dependable, budget-friendly assignment help-starting today!
3. In small groups, role-play a social engineering attempt (e.g., an attacker calling IT support pretending to be an employee).

Part B - DNS Security
Objective: Learn how to identify DNS servers and test if they are vulnerable to zone transfer attacks.
Activity Steps:
Open a command line terminal in your Kali Linux or Windows environment.
Use the nslookup tool to find authoritative DNS servers for a target domain. Example:
nslookup
> set type=ns
> example.com
Once you have identified the DNS server, attempt a zone transfer using:
nslookup
> server dns.example.com
> ls -d example.com
If the zone transfer is successful, the server is vulnerable. If it fails, the server is properly secured.
Record your findings: Which DNS servers responded? Were any vulnerable to zone transfers?
Deliverable:
Write a two-page report including:
- Tools used (e.g., nslookup, dig, host)
- Steps followed
- Results of testing (whether zone transfers were allowed)
- Recommendations to secure DNS servers (e.g., disable zone transfers, restrict to secondary DNS servers only)