# TryHackme: DigDug – a walkthrough.

## Introduction

Oooh, turns out, this {MACHINE\_IP} machine is also a DNS server! If we could dig into it, I am sure we could find some interesting records! But... it seems weird, this only responds to a special type of request for a [givemetheflag.com](http://givemetheflag.com) domain?

Access this challenge by deploying both the vulnerable machine by pressing the green "Start Lab Machine" button located within this task, and the TryHackMe AttackBox by pressing the  "Start AttackBox" button located at the top-right of the page.

Use some common DNS enumeration tools installed on the AttackBox to get the DNS server on {MACHINE\_IP} to respond with the flag.

So, start the attackbox, start the target machine.

Once they are up, I look into what the address may show:

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/638f3d19-edf4-4186-b1ef-5932e096b468.png align="center")

Nothing.  
Trying "[givemetheflag.com](http://givemetheflag.com)" – to no avail:

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/f533cc14-8839-4e1f-bada-ce5338f6f6a3.png align="center")

And why should I find anything?  
The hints are clear: this machine is a DNS server.

So, I bring on a classic via the Terminal:

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/03e17753-032e-44db-ac90-4aae0b0a2993.png align="center")

But not much info here, either.

Read the title again: DigDug  
Okay, let's dig, then!

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/23a36743-7423-41ab-9552-356ca2f7b51d.png align="center")

Nope.

Another try:

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/b72f8c92-3e72-4ca0-bb32-9739c8dab627.png align="center")

Nope, wrong again.  
Okay, I then decided to turn to the man page:

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/1e4c2b07-5760-453e-872e-53d1c448f131.png align="center")

And, voila, look what we see:

```shell
dig @server name
```

so, let's go with it!

![](https://cdn.hashnode.com/uploads/covers/6a51ed1a14f7277783e1034a/282d7693-a04d-4a50-ba55-a4ef3337f1b7.png align="center")

And here we go – catched the flag!

## Question: Retrieve the flag from the DNS server!

<mark class="bg-yellow-200 dark:bg-yellow-500/30">ANSWER:</mark>  
flag{0767ccd06e79853318f25aeb08ff83e2}

And there you go. A nice little walk on a video game reference from the 80s – hwhho knows the video game Dig Dug?