Tag Info

New answers tagged


You haven't provided enough to go by therefore I will ask the following question, what is it of yours that is being affected is it just the domain. Or for example, do you have solely your DNS servers for another server hosted by your provider, or do you have say a webserver and other servers hosted by them. There is a big difference in that kind of question: ...


You should only need to switch DNS providers. The registrar is simply a service used to register your domain. This is a different function from DNS resolution. When a user attempts to access your machines, it must query a DNS server to resolve your IP address. Therefore, DNS resolution is a critical part of how fast people reach your service.


Cache poisoning occurs easiest when the entire infrastructure uses the same set of recursive resolvers. To mitigate this risk, I prefer to have different recursive resolvers for these roles: End user queries, Web surfing: For all workstations, or ideally WCCP, use a dedicated DNS infrastructure. For added security, use DNSSecurity like OpenDNS End user ...


But, which is the more effective? They address slightly different issues: Port randomization makes DNS spoofing harder because there is an additional unknown secret for the attacker (the port) which must match for the spoofed answer. With DNSSec one can reliably detect if the answer was spoofed. Which solutions are really deployed in the ...


EvilFOCA will introduce you to a few common network MITM concepts. It runs on Windows and is very easy to setup and control.


"The attacker registers a domain (such as attacker.com) and delegates it to a DNS server he controls. The server is configured to respond with a very short time to live (TTL) record, preventing the response from being cached. When the victim browses to the malicious domain, the attacker's DNS server first responds with the IP address of a server hosting the ...


Nope, I don't think there are any vulnerabilities. A google search turned up this article from 2005 which suggests that your customers might use the wildcard to generate semi-convincing URLs(e.g. http://barclays.co.uk|snc9d8ynusnes89g8z.domain.com) for phishing attacks. Nevertheless, I dont think its something to worry about. link : ...


If you have a rooted Android connected over WiFi, dsploit is an excellent tool. It can perform active attacks of various kinds, as well as network scans. MITM with sslstrip and content substitution is an option. http://www.dsploit.net/


You might be interested in the WiFi Pineapple from Hak5, which provides turn-key MitM functionality. Troy Hunt has a helpful quick start guide.

Top 50 recent answers are included