The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

14
votes
5answers
1k views

How secure is binding to localhost in order to prevent remote connections?

Let's say we're running a service that's bound to localhost (127.0.0.1), and the goal is to only allow local clients (i.e. from the same machine only) What techniques might be used to break this ...
-5
votes
1answer
53 views

Malicious Website URL [closed]

Recently I found out that there are malicious websites that do not have a domain name on its own. For example, 94.247.2.195 as in ...
1
vote
2answers
54 views

Difference between DNS spoofing and phishing [closed]

I am writing a bachelor thesis and I am having a hard time figuring out the difference between phishing and DNS spoofing. From what I understand, DNS spoofing is a way to achieve a succesfull phishing ...
0
votes
1answer
29 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
2
votes
1answer
22 views

Does any DNS Recursive resolver accept a “DNSSEC-only” option under DNSCurve?

I want to use DNSCurve (for privacy) to a trusted DNSSec resolver (for integrity), and want to ensure that I can tell a recursive resolver (like 8.8.8.8, or OpenDNS) that I only want DNSSec queries. ...
1
vote
1answer
40 views

How Fast Flux technique works exactly?

I was reading about botnets and C&C servers and saw this term. I've read this Wikipedia article but I couldn't really understand what and how this is working. I think its some kind of proxy ...
2
votes
0answers
42 views

Is there an HSTS equivalent for DNSSec?

Is there any way to set a DNSSec-always policy similar to how HSTS commands Web Browsers to always use HTTPS? This would mitigate a DNSSec-strip attack (similar to SSLStrip) I'm also unclear if this ...
5
votes
1answer
63 views

I just deployed DNSSec. Is there any benefit in DANE for a CA- issued Cert?

I just deployed DNSSec at https://val-id.com and https://getvalid.com Since DNSSec is a requirement of DANE, and I have a CA-based certificate, can I show my support for DANE-based deployments by ...
9
votes
3answers
467 views

External websites in logs [duplicate]

I have a website, let's call it www.good.com. I've been getting a lot of requests to www.good.com under completely different URLs than www.good.com. I suspect this traffic is also causing some site ...
1
vote
2answers
169 views

Might Google log every website I visit using Chrome?

I wanted to start using Chrome for quite some time now, but I really don't want to tell Google about whatever sites I visit. So I was wondering if Chrome sends any data to Google telling them what ...
2
votes
1answer
36 views

DNS Rebinding attack - does this attack require victim to use an attacker's DNS server for resolution? How will that happen?

Usually a preferred DNS server will be set in router's configuration and it will be either the organization's server or some trusted public server. So how would attacker get the victim to use his DNS ...
0
votes
0answers
13 views

What jurisdiction do DNS root servers and corresponding TLDs have?

We are setting up DNSSec and want to document risks that relate to the core root servers, their binding keys, and the next level DNS TLD. Since there is history saying that the US Government owns ...
5
votes
0answers
127 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
1
vote
2answers
642 views

How can I stop someone to display my website with his domain?

I just discovered on a website that someone is pointing a DNS on the server I use for a website, and by this mean, is displaying the website of "my" server. How can I stop this unlegitimate use of ...
1
vote
1answer
77 views

Is it possible to redirect someone to a fake site without changing the hosts file?

Is it possible to redirect someone to a fake site without changing the hosts file? When I access a bank site, I receive a fake page. But my hosts file does not have any changes to do this. Is it ...
1
vote
0answers
66 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
1
vote
2answers
63 views

Using DNS to track browser activity on a LAN

I am trying to create a small network auditing script that tracks HTTP and HTTPS domain names visited by certain hosts using the libpcap wrapper for Nodejs. At its best the script would be able to ...
1
vote
2answers
89 views

Using free subdomains to circumvent web filtering systems

(I was told that this was the place to ask this by someone from Webmasters, if I've got it wrong again please give me a chance!) I'm running a personal proxy service for the use of myself and some of ...
0
votes
2answers
126 views

Google DNS in Firewall logs

I was viewing my firewall logs and come across the IP 8.8.8.8. Further check reveals it most likely belong to Google DNS. And such traffic has been going out from some of our LAN segment PCs. From ...
5
votes
1answer
94 views

How can I protect myself against DNS leaks?

As discussed here, a DNS leak is where DNS lookups ignore your current routing (in the example of a VPN connection) and still end up going out over your normal internet connection. This can ...
2
votes
1answer
45 views

Is a ptr mechanism in an SPF record secure?

If I understand http://www.openspf.org/SPF_Record_Syntax correctly, any machine with an IP that points to my-domain.com can send email as if it's from my-domain.com if I'm using ptr in my SPF record. ...
0
votes
1answer
74 views

How does the DNS-spoofer know the original destination of the packet?

It's perhaps my lack of deeper knowledge of how the DNS, NAT or TCP works, but I have been thinking about the following scenario and can't figure out the following problem which arises in DNS-spoofing ...
1
vote
2answers
128 views

Roommate Frequently Hacked — How Do I Protect My Network/Devices?

If you absolutely had to share a network with a user who had a very lax approach to security and was frequently hacked (1-2x month for over a year now), what might you consider doing to secure your ...
2
votes
1answer
275 views

ISP glitch or a malware? Has this ever happened to you?

Brief background: I consider myself a relatively paranoid power-user, if not an absolute pro. I regularly update my AV and keep up with all the latest updates on my Windows7 machine. But what happened ...
0
votes
1answer
33 views

Security risks of allowing customer to use his own domain for a hosted SaaS application

As a SaaS hosting, we are considering allowing customer to use an alternative domain to access his SaaS environment. Default domain owned and hosted by us: customersubdomain.ourdomain.com ...
4
votes
5answers
138 views

How can I determine the domain controller when it's not in DNS?

On a penetration test going in blind for an organization, meaning no knowledge of network topology of design, no idea what the domain(s) might be, and domain controller is not apparent in DNS...how ...
0
votes
2answers
55 views

Unpublished server

Is it possible to setup my web server such that only certain sources can access and the public from internet has no access? i am thinking that we could just not publish our web server URL/IP to our ...
0
votes
1answer
76 views

Strange block page on OpenDNS?

This morning I went to the internet and accidentally clicked on a blocked website (OpenDNS blocked it). Though there was something strange on the place of the icon there was a little router icon and ...
1
vote
2answers
139 views

DNSSec vs SSL and IPsec

Theoretically, DNS cache poisoning shouldn't matter,because everything important is protected by SSL and IPsec. So why DNSSec was developed? Aren't the first two protocols sufficient?
1
vote
2answers
127 views

Security risk with using internal IP on public DNS

A web server inside the office network which is accessed by staff internally and the internal DNS resolves web.company.com to the server's LAN IP. Publicly, company.com nameservers belong to their ...
1
vote
2answers
151 views

What can my university see by installing a CA root certificate on my computer, even when I'm using a VPN?

To use the wifi at my university, you must install a CA root certificate by them. In my case, I am using a Mac computer with a VPN installed. I'm curious, what can they see me do on my computer by ...
5
votes
0answers
115 views

Kaminsky Bug DNS Cache Poisoning

I'm trying to use Kaminsky DNS cache poisoning method. I'm using bind9 server on ubuntu and static port. So far I achieved to insert a line into DNS cache which is ;additional www.blalba.com 80000 ...
9
votes
0answers
601 views

Attackers of Google DNS hijacking

As we know Google DNS server (8.8.8.8) in 14th and 15th March was hijacked in Sao Paulo. And subsequent to this event, BGPmon.org announced an alert Now, In a course assignment, we are asked to ...
2
votes
0answers
55 views

DNS poisoned cache does not have any effect [closed]

I try to reproduce the attack, revealed by Dan Kaminsky in 2008, to poison DNS cache. I made my own virtual network, and all I do is confined within. The poisonning seems to work. But is doesn't. ...
0
votes
0answers
51 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...
0
votes
3answers
102 views

DoS attack against a domain registrar and DNS provider

our smalltime registrar comes under DoS often who is also our DNS provider. If we switch our DNS provider, will it let us keep our domain afloat during an attack against the registrar, or do we have ...
3
votes
2answers
103 views

Which is the best antidote for DNS cache poisoning?

I know some antidotes for DNS cache poisoning attacks, both simple as port randomisation, and more complex as DNSSEC. But, which is the more effective? Which solutions are really deployed in the ...
6
votes
1answer
112 views

DNS Rebinding attack - will the victim's browser send cookies?

How does a DNS Rebinding attack works? How can it violate the Same-origin policy? Will the victim's browser send cookies to the remote server (specified by IP), when the domain is not the same as is ...
1
vote
1answer
24 views

Wildcard DNS entry from a security PoV

We are going to release our new product which will have customers create their own subdomains. This requires having a wildcard DNS on our main domain (We have no other options, right?) Are there any ...
2
votes
5answers
435 views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
0
votes
4answers
268 views

Masking IP address and port number for Web application [closed]

I have a Web application running on port 89 ( non-standard port) of a Windows 2012 R2 machine. The login page for this application needs to be accessible through a link on my website - let's call it ...
0
votes
2answers
108 views

Browser page “Not resolved” page hijacked by yandex [closed]

Any domain that cannot be resolved defaults to yandex right now, on any browser on my system. Helper objects or extensions are not installed. It turns out that the ISP (Turk Telekom) is employing ...
3
votes
3answers
88 views

How to determine if resolved ip is rogue or part of CDN?

I'm subscribed to goverment's owned ISP because only this ISP provides access to rural area. It has a bad reputation because it is not only redirects sites, but also injects JavaScript for ...
1
vote
1answer
79 views

Force DNS to attach bad IP address

The question is not professional, but what I'm trying to say is... Is there any way to inject or force the DNS server to attach/change an IP address for some site. For example, I'm running an apache ...
1
vote
3answers
643 views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
4
votes
3answers
2k views

How can I detect a VPN connection (even just in some cases) to get the real location of the user

I'm creating a web site, I would like to allow people to sign-up only from their "real" physical location (not using a VPN). I was thinking maybe comparing local and server time... what else...? ...
4
votes
2answers
1k views

How Do I Troubleshoot a Browser Hijack on a Mac?

My Mac is getting weird redirects with Safari and Chrome, however not with Mozilla Firefox. Since I cannot find software to do malware removal on Apple products or any good information, I am at a loss ...
-4
votes
2answers
226 views

Is “HTTPS” ~100% secure? [duplicate]

Assuming that we have a "green bar connection" to a website, e.g.: Is an attacker still able to sniff our traffic? How secure is a user from man-in-the-middle attacks when he has established a ...
0
votes
1answer
662 views

How to test for zone transfer? [duplicate]

I heard that it is possible to test for zone transfer attacks on a web application using host and dig commands in Linux. How it is done?
9
votes
2answers
2k views

Is the Google address being spoofed on my computer?

I might use some inappropriate terminology because I am no expert, but please feel free to correct me where it is needed. I believe that a process has modified some network file on my computer, like ...