macos community v1.0.0

dns-sd

Discover local network services using the DNS-Based Service Discovery (SD) protocol.

📋 Live Preview 
dns-sd
dns-sd

Sandbox: execFile · Timeout: 30s

Capabilities

discovery.enumerate

Examples

Discover SSH hosts: Hosts serving SSH can be discovered using the _ssh._tcp service string.

dns-sd -B _ssh._tcp

Discover web hosts: Hosts serving web services can be discovered using the _http._tcp service string.

dns-sd -B _http._tcp

Discover hosts serving remote screen sharing: Hosts serving remote screen sharing can be discovered using the _rfb._tcp service string.

dns-sd -B _rfb._tcp

Discover hosts serving SMB: Hosts serving SMB can be discovered using the _smb._tcp service string.

dns-sd -B _smb._tcp

Detection

TypeRule / Indicator
other https://github.com/jamf/jamfprotect/blob/main/custom_analytic_detections/dns_service_discovery Jamf Protect: Detect dns-sd discovery activity

Documentation

dns-sd can be used to interact with the Multicast DNS (mDNS) and DNS Service Discovery (DNS-SD) protocols. The tool is useful for administrators but can also be abused by malicious actors to discover local network services.

References