I'm pretty new to this world of security and I'm doing some challenges trying to solve puzles of security, the thing is I have a website that is not loading it throws a timeout if I do ping, but playing with nslookup dig I've found an IP that responds to the ping, and in the path of finding this IP I found that the website I'm trying to get admin privileges have :
[ - ] DNSSEC is not configured for this website
And I'm wondering if this could be the vulnerability of the puzzle because I need to have admin privileges of the machine (there's only a website) I've been checking the
dns-rebind I could execute this command but don't know if it's usefull
dns-rebind -i ech0 -d website starting dns server on port X starting web server on port 80 ... services started and running!
I don't know if I'm in the correct way, perhaps this DNSSEC is not the way to get acces to the maching and I'm losing too much time here.
Having this "open" I can do DNS spoofing right? Does it help to me to enter to server and change privilegies?