The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

0
votes
1answer
287 views

How CDN operator will decide content fo me if i am using google public DNS [closed]

As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
0
votes
1answer
23 views

Does using FreeDNS introduce a security risk?

If you use a service like FreeDNS for a DNS, does this introduce any additional security risk as opposed to simply paying a registrar? Obviously the owner of FreeDNS could hijack your domain. But ...
0
votes
1answer
41 views

Certificate validation Local DNS hosts file

I've a question regarding a certificate validation error I'm getting. I'm performing an https request from one machine to another (windows machines). On the destination machine I've configured a ...
0
votes
1answer
89 views

How does the DNS-spoofer know the original destination of the packet?

It's perhaps my lack of deeper knowledge of how the DNS, NAT or TCP works, but I have been thinking about the following scenario and can't figure out the following problem which arises in DNS-spoofing ...
0
votes
2answers
131 views

Browser page “Not resolved” page hijacked by yandex [closed]

Any domain that cannot be resolved defaults to yandex right now, on any browser on my system. Helper objects or extensions are not installed. It turns out that the ISP (Turk Telekom) is employing ...
0
votes
1answer
191 views

Save to setup localhost.example.com to test wildcard SSL?

I have a domain with a wildcard SSL certificate (i.e. "*.example.com"). I also develop using WAMP setups, which I would like to be able to test HTTPS on. There are several tutorials on how to setup a ...
0
votes
2answers
1k views

How could you find wildcard subdomains on websites?

Other than testing different URLs separately, is there anyway to find out if a website has a wildcard sub domain?
0
votes
1answer
2k views

Enabling port forwarding on port 53 on a DNS server, why is it a risk?

Well, actually I know that the risk is that somebody from an external network could access IPs and hostnames of the machines on a local network, but I am struggling to understand if this is it or if ...
0
votes
1answer
148 views

Alternative to ICANN? [closed]

What are major DNS services offered that aren't state-controlled. Better yet, why can't we take Bitcoin's model and create a truly decentralized system with P2P DNS? I see potential reasons behind ...
0
votes
1answer
110 views

How to investigate this anomaly?

According to the IT managers, this problem is neither at the server nor at the client but is suspected to be somewhere inbetween e.g. some DNS server that has been infected. Do you recognize this ...
0
votes
1answer
1k views

DNS Cache Poisoning and Snooping

I'm trying to do two things here. The first is poison the cache of a target DNS server. A scan has suggested the network I'm attacking is vulnerable to CVE-1999-0024. My understanding of this ...
0
votes
1answer
509 views

How have DNS recursion attacks happened?

There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still ...
0
votes
3answers
725 views

DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?

My computer does a lot of queries to strange domains such as: 56cea5c2b408989ab067adcb787d0f99209bbe07.mydomain.com The strange thing is that 56cea5c2b408989ab067adcb787d0f99209bbe07 is the SHA1 of ...
0
votes
1answer
357 views

Is using a local DNS cache server more secure than using a DNS server from a router?

Is using a local DNS cache server imore secure than using a DNS server from a router?
0
votes
2answers
59 views

Getting the DNS root name servers in a secure way

It doesn't happen often that a root name server changes, but when it does sometimes it takes months for OS vendors to provide patches and in the mean time there is a security risk. So: How to get ...
0
votes
1answer
44 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
1answer
43 views

Security risks of allowing customer to use his own domain for a hosted SaaS application

As a SaaS hosting, we are considering allowing customer to use an alternative domain to access his SaaS environment. Default domain owned and hosted by us: customersubdomain.ourdomain.com ...
0
votes
4answers
173 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
0
votes
3answers
167 views

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
0
votes
1answer
120 views

Is there a secure DNS provider? [closed]

Is there a secure DNS provider? Kind of alternative to DNSCrypt.
0
votes
1answer
731 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
0
votes
1answer
142 views

The importance of changing DNS when Using Antifiltering software

Is it safe that sometimes my Anti-filtering program does not change the DNS address?
0
votes
2answers
1k views

Protecting yourself against DNS spoofing?

Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
0
votes
0answers
18 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
22 views

Shouldn't DNSCurve be parallel to DNSSEC at root level for diversity?

As per the answer at If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?, it's been determined that one of the reasons that DNSCurve is behind DNSSEC is due to the nature of the ...
0
votes
0answers
23 views

What jurisdiction do DNS root servers and corresponding TLDs have?

We are setting up DNSSec and want to document risks that relate to the core root servers, their binding keys, and the next level DNS TLD. Since there is history saying that the US Government owns ...
0
votes
1answer
101 views

Strange block page on OpenDNS?

This morning I went to the internet and accidentally clicked on a blocked website (OpenDNS blocked it). Though there was something strange on the place of the icon there was a little router icon and ...
0
votes
0answers
59 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...
-1
votes
1answer
403 views

How does DNS work?

I'm learning pentesting from books. So far I thought I know about DNS but now I'm completely lost and confused. well, I know what happens when you enter domain name in your browser: Say, I've ...
-1
votes
2answers
442 views

ISP can detect DNS requests for a website. Can it do the same for websites embedded inside other websites ? [duplicate]

ISP can detect DNS requests for a web site, ie www.google.com . If I have a website ie www.mysite.com, and a webpage ie www.mysite.com/mypage.html and inside www.mysite.com/mypage.html , the web site ...
-1
votes
1answer
66 views

dns reflection attack vs dns amplification attack

Over the past few weeks I have hard the discussion of a DNS reflection attack and a DNS amplification attack. Is there truly a difference between the two or are people just using 2 different names ...
-1
votes
1answer
327 views

How secure are the new TLDs ( .us, .io, …) and do they compare to .com? [closed]

The introduction of the new top level domains (TLDs) such as .music, .books, etc. will increase the number of people and organisations adding and removing entries into the root DNS servers (.) for ...
-1
votes
1answer
204 views

Is .bank owned by banking industry or not? [closed]

According to https://idc-insights-community.com/financial/financial-services-technology/the-four-letter-word-that-could-change-the-busines Banking Industry was lobbying for .bank But as I read this ...
-1
votes
1answer
96 views

Redirect attack [closed]

I just discovered that our server other's website for example: http://destiny.mbtosi.com/styles/new/images/no.png should say "This Web Page no longer exists." but in 50% hits it shows an image from ...
-2
votes
3answers
406 views

Available alternative DNS protocol not another dark-net [closed]

Hi does any one knows any DNS alternative Protocols ? If so what is the most used ? Is easy to setup ? Is easy to have two DNS protocols one where you connect to the Common Internet and the other ...
-2
votes
2answers
87 views

DNS Security Questions

I plan to use a DNS service, I'm just wondering what sort of information gets sent. Will my passwords, browsing activity flow through the DNS servers? I kind of know what a DNS is, but I'm not sure ...
-2
votes
0answers
37 views

How does this Metasploit DNS attack work?

The question is about the Metasploit Framework BailiWicked attack. I want to give it a go, and want to test my internal DNS server, but was curious about how this attack works. I've tried to find ...
-3
votes
0answers
31 views

Alternative to ICANN DNS [on hold]

From what I've read: DNS is for mapping IP addresses to a corresponding name. The organization that is responsible for creating, managing and distributing domain names is ICANN. So, if we have a ...
-4
votes
2answers
284 views

Is “HTTPS” ~100% secure? [duplicate]

Assuming that we have a "green bar connection" to a website, e.g.: Is an attacker still able to sniff our traffic? How secure is a user from man-in-the-middle attacks when he has established a ...
-5
votes
1answer
87 views

Malicious Website URL [closed]

Recently I found out that there are malicious websites that do not have a domain name on its own. For example, 94.247.2.195 as in ...