Challenge Description#

The challenge name “Digger” is a hint to use DNS digging tools like dig to enumerate records.

Analysis#

DNS-based CTF challenges commonly hide flags in:

• TXT records

• MX records

• subdomains

• zone transfer misconfigurations (AXFR)

Exploitation#

Query TXT records for the domain:

1
dig TXT sriwijayasecuritysociety.com

The TXT record response contained the flag:

1
;; ANSWER SECTION:
2
sriwijayasecuritysociety.com. 300 IN TXT "SCSC26{d4g_d1g_dug_d4n9du7}"