//SAM BLAMER
personal projects / research / technical archive
/research/TryHackMe Writeups/Dig Dug.md

[[Easy]] | [[DNS]]

This challenge gives us a DNS Server IP, URL, and a fair bit of hints on what we need to do to get the flag from the DNS server. Here is the info for my specific instance:

  • URL: givemetheflag.com
  • DNS IP: 10.66.144.232

If we try going to the IP on our browser, it doesn't return a webpage. If we run an nmap scan on the host, it will show us that ports 22 and 53 are both open, but 53 is filtering results.
nmap -sV 10.66.144.232

Given the clues in the lab as well as this information, we can run the following command for DNS records on the specified site:
dig @10.66.144.232 givemetheflag.com

Doing this will give us the following output with our flag

; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> @10.67.184.16 givemetheflag.com

; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13644
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:

;givemetheflag.com. IN A

;; ANSWER SECTION:

givemetheflag.com. 0 IN TXT "flag{0767ccd06e79853318f25aeb08ff83e2}"

;; Query time: 2 msec

;; SERVER: 10.67.184.16#53(10.67.184.16) (UDP)
;; WHEN: Sat Jun 06 01:10:36 UTC 2026
;; MSG SIZE rcvd: 86

NOTE: This box may not work correctly using the VPN. You may need to use the attackbox in order to get the proper response if the above command does not work.