The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

learn more… | top users | synonyms

0
votes
1answer
1k views

tor and widecap dns leak

I am using a program that I coded in C#. All it does is use HttpWebRequest to request some pages and read info from them. I tried running it through Tor. I installed the Vidalia Bundle and Widecap. My ...
0
votes
4answers
685 views

Masking IP address and port number for Web application [closed]

I have a Web application running on port 89 ( non-standard port) of a Windows 2012 R2 machine. The login page for this application needs to be accessible through a link on my website - let's call it ...
0
votes
3answers
210 views

How would I secure my hosts file?

I know the hosts file is often deemed obsolete by an actual DNS, but what is/are the best way(s) to secure a hosts file (Current Best Practice)? Example: Would I delete the hosts file, input known ...
0
votes
2answers
835 views

DNS Cache Poisoning as a Foil to SSL

I recently learned a bit more about DNS cache poisoning, and my understanding of the basic way it works is by editing the DNS cache so that when the victim types in, say, www.google.com they get the ...
0
votes
2answers
211 views

Can Tor browser bundle be attacked like this?

When using the Tor browser bundle, you load the check.torproject.org on start. It tells you when there is a security update to downloads, and let's you click a link to get it. The way for users to ...
0
votes
1answer
290 views

How CDN operator will decide content fo me if i am using google public DNS [closed]

As i saw most of the internet is being load balanced even at DNS . And DNS load balancers takes decision on behalf of client's DNS . So I Am just curious to know if i will use 8.8.8.8 as nameserver in ...
0
votes
1answer
53 views

Certificate validation Local DNS hosts file

I've a question regarding a certificate validation error I'm getting. I'm performing an https request from one machine to another (windows machines). On the destination machine I've configured a ...
0
votes
1answer
92 views

How does the DNS-spoofer know the original destination of the packet?

It's perhaps my lack of deeper knowledge of how the DNS, NAT or TCP works, but I have been thinking about the following scenario and can't figure out the following problem which arises in DNS-spoofing ...
0
votes
2answers
134 views

Browser page “Not resolved” page hijacked by yandex [closed]

Any domain that cannot be resolved defaults to yandex right now, on any browser on my system. Helper objects or extensions are not installed. It turns out that the ISP (Turk Telekom) is employing ...
0
votes
1answer
201 views

Save to setup localhost.example.com to test wildcard SSL?

I have a domain with a wildcard SSL certificate (i.e. "*.example.com"). I also develop using WAMP setups, which I would like to be able to test HTTPS on. There are several tutorials on how to setup a ...
0
votes
2answers
1k views

How could you find wildcard subdomains on websites?

Other than testing different URLs separately, is there anyway to find out if a website has a wildcard sub domain?
0
votes
1answer
2k views

Enabling port forwarding on port 53 on a DNS server, why is it a risk?

Well, actually I know that the risk is that somebody from an external network could access IPs and hostnames of the machines on a local network, but I am struggling to understand if this is it or if ...
0
votes
1answer
153 views

Alternative to ICANN? [closed]

What are major DNS services offered that aren't state-controlled. Better yet, why can't we take Bitcoin's model and create a truly decentralized system with P2P DNS? I see potential reasons behind ...
0
votes
1answer
111 views

How to investigate this anomaly?

According to the IT managers, this problem is neither at the server nor at the client but is suspected to be somewhere inbetween e.g. some DNS server that has been infected. Do you recognize this ...
0
votes
1answer
1k views

DNS Cache Poisoning and Snooping

I'm trying to do two things here. The first is poison the cache of a target DNS server. A scan has suggested the network I'm attacking is vulnerable to CVE-1999-0024. My understanding of this ...
0
votes
1answer
515 views

How have DNS recursion attacks happened?

There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still ...
0
votes
3answers
748 views

DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?

My computer does a lot of queries to strange domains such as: 56cea5c2b408989ab067adcb787d0f99209bbe07.mydomain.com The strange thing is that 56cea5c2b408989ab067adcb787d0f99209bbe07 is the SHA1 of ...
0
votes
1answer
387 views

Is using a local DNS cache server more secure than using a DNS server from a router?

Is using a local DNS cache server imore secure than using a DNS server from a router?
0
votes
2answers
62 views

Getting the DNS root name servers in a secure way

It doesn't happen often that a root name server changes, but when it does sometimes it takes months for OS vendors to provide patches and in the mean time there is a security risk. So: How to get ...
0
votes
1answer
46 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
1answer
43 views

Security risks of allowing customer to use his own domain for a hosted SaaS application

As a SaaS hosting, we are considering allowing customer to use an alternative domain to access his SaaS environment. Default domain owned and hosted by us: customersubdomain.ourdomain.com ...
0
votes
4answers
177 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
0
votes
3answers
174 views

What is the technical rationale behind intermediary email servers?

EFF's Survelliance Self-Defense (SSD) project has an illustration of how email over SMTP goes through intermediate mail exchange servers: AFAIK each intermediate servers is expected to add its own ...
0
votes
1answer
123 views

Is there a secure DNS provider? [closed]

Is there a secure DNS provider? Kind of alternative to DNSCrypt.
0
votes
1answer
754 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
0
votes
1answer
144 views

The importance of changing DNS when Using Antifiltering software

Is it safe that sometimes my Anti-filtering program does not change the DNS address?
0
votes
2answers
1k views

Protecting yourself against DNS spoofing?

Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
0
votes
0answers
69 views

'google.com' DNS resolved to addresses of ISP

When I open cmd.exe and do nslookup on google.com I am getting a set of addresses that belong to my ISP. More than that, even when I try to run server 8.8.8.8 or server 8.8.4.4 and query for ...
0
votes
0answers
27 views

How does Wireshark resolve DNS names? [migrated]

Could you explain how wireshark makes a DNS query in order to resolve name of an IP address? My issue is about the mismatch between the DNS resolved by Wireshak against nslookup, moreover nslookup ...
0
votes
0answers
27 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
22 views

Shouldn't DNSCurve be parallel to DNSSEC at root level for diversity?

As per the answer at If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?, it's been determined that one of the reasons that DNSCurve is behind DNSSEC is due to the nature of the ...
0
votes
1answer
104 views

Strange block page on OpenDNS?

This morning I went to the internet and accidentally clicked on a blocked website (OpenDNS blocked it). Though there was something strange on the place of the icon there was a little router icon and ...
0
votes
0answers
61 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...
-1
votes
1answer
411 views

How does DNS work?

I'm learning pentesting from books. So far I thought I know about DNS but now I'm completely lost and confused. well, I know what happens when you enter domain name in your browser: Say, I've ...
-1
votes
2answers
449 views

ISP can detect DNS requests for a website. Can it do the same for websites embedded inside other websites ? [duplicate]

ISP can detect DNS requests for a web site, ie www.google.com . If I have a website ie www.mysite.com, and a webpage ie www.mysite.com/mypage.html and inside www.mysite.com/mypage.html , the web site ...
-1
votes
1answer
127 views

dns reflection attack vs dns amplification attack

Over the past few weeks I have hard the discussion of a DNS reflection attack and a DNS amplification attack. Is there truly a difference between the two or are people just using 2 different names ...
-1
votes
1answer
332 views

How secure are the new TLDs ( .us, .io, …) and do they compare to .com? [closed]

The introduction of the new top level domains (TLDs) such as .music, .books, etc. will increase the number of people and organisations adding and removing entries into the root DNS servers (.) for ...
-1
votes
1answer
208 views

Is .bank owned by banking industry or not? [closed]

According to https://idc-insights-community.com/financial/financial-services-technology/the-four-letter-word-that-could-change-the-busines Banking Industry was lobbying for .bank But as I read this ...
-1
votes
1answer
97 views

Redirect attack [closed]

I just discovered that our server other's website for example: http://destiny.mbtosi.com/styles/new/images/no.png should say "This Web Page no longer exists." but in 50% hits it shows an image from ...
-2
votes
3answers
409 views

Available alternative DNS protocol not another dark-net [closed]

Hi does any one knows any DNS alternative Protocols ? If so what is the most used ? Is easy to setup ? Is easy to have two DNS protocols one where you connect to the Common Internet and the other ...
-2
votes
2answers
88 views

DNS Security Questions

I plan to use a DNS service, I'm just wondering what sort of information gets sent. Will my passwords, browsing activity flow through the DNS servers? I kind of know what a DNS is, but I'm not sure ...
-2
votes
0answers
57 views

Why are my pings going to 'customer.algx.net'? [migrated]

When I try to ping google.com, I get the following output: $ ping google.com PING google.com (67.89.227.247) 56(84) bytes of data. 64 bytes from ip67-89-227-247.z227-89-67.customer.algx.net ...
-5
votes
2answers
308 views

Is “HTTPS” ~100% secure? [duplicate]

Assuming that we have a "green bar connection" to a website, e.g.: Is an attacker still able to sniff our traffic? How secure is a user from man-in-the-middle attacks when he has established a ...
-6
votes
1answer
92 views

Malicious Website URL [closed]

Recently I found out that there are malicious websites that do not have a domain name on its own. For example, 94.247.2.195 as in ...