A BIND 9.10.3 server authoritative for vulhub.org with no allow-transfer setting: an AXFR request from any address returns every record of the zone, revealing hosts that are not otherwise published.
Not startedDockercommit 9a81f9fx86_64 · aarch64Secret
Use a zone transfer to list every record of the vulhub.org zone and find the flag.
The brief for this lab lives in its repository.