2
votes
0answers
10 views

Is DNSSEC immune to stripping signatures?

In my opinion, it should be possible to forge DNS reply so it doesn't include DS/RRSIG/... parts for any request, thus bypassing DNSSEC validation of resolved domain. Is DNSSEC system immune to this ...
2
votes
2answers
136 views

DNS cache poisoning in LAN without MITM

Many questions have already been asked about DNS cache poisoning (aka Kaminsky attack), however I couldn't find a clear answer to my question: Is DNS cache poisoning possible in a LAN, without ...
2
votes
1answer
63 views

How does a client know that a DNS zone is DNSSEC protected?

Recently, I've been reading about DNSSEC and how it works. I found other questions and some very interesting answers on this and other websites related to this matter. However, I have a question to ...
0
votes
2answers
2k views

Should ettercap make the targets this slow?

I recently started experimenting with ettercap, however, I quickly noticed that when I try and arp poison targets they can almost never communicate with each other. Is this normal? My computer is a ...
4
votes
1answer
979 views

DNS MITM Remote Attack

I guess this is not considered a true MITM attack since the attacker does not have to be between the server and client. My question is how it is possible to poison a DNS cache, and redirect traffic to ...