There are a few resources describing how to carry out DNS recursion attacks. Is there any good explanation to help me understand how these attacks work and if systems on my network are still vulnerable?

  • Wait, do you mean DNS cache poisoning? – Luc Sep 22 '12 at 21:31
  • What do you mean by "DNS recursion attacks"? This is not a standard phrase that I've heard used in the field, so I suspect you've either heard it somewhere or made it up yourself. (There are a variety of DNS attacks that might make use of recursion in some capacity, though I've never heard them called a "recursion attack".) I can make some plausible guesses about what you might mean by that phrase, but I'd rather not guess. What do you mean by "DNS recursion attacks"? What makes you focus on "DNS recursion attacks"? – D.W. Sep 24 '12 at 1:40

The basic "Mother of all Recursion Attacks" was published by Dan Kaminsky.

The basic summary is that you ask for a site and provide an answer with the appropriate query idea for the recursive server before that server gets the real answer.

The best resource I've got for you is An Illustrated Guide to the Kaminsky DNS Vulnerability which describes how the recursive system worked and why the flaw was possible.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.