Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
0 votes
1 answer
37 views

What happens if both DoH and DoT are enabled?

If I have DNS over HTTPS and DNS over TLS activated simultaneously (router has DoT activated and smartphone browser has DoH activated, so I see on https://1.1.1.1/help DoH: yes and DoT: yes), which ...
user avatar
  • 71
0 votes
1 answer
33 views

DNS Enumeration by IP Address

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address? My ...
user avatar
-2 votes
1 answer
57 views

What TLDs are safe to whitelist?

What top-level domains (TLD) are safe and would be safe for example to whitelist? I guess .gov and .mil are safe? While .com, .net and .org are not since anyone can register those. Is .int safe? And ...
user avatar
  • 97
0 votes
3 answers
89 views

Does the Time-To-Live (TTL) value of DNS records have any security implications?

I'm currently reading about resource record in the Domain Name System (DNS), in particular about the Time to live (TTL) aspect of start of authority records (SOA) records. It seems to me that the TTL ...
user avatar
  • 6,190
0 votes
2 answers
144 views

Why can't I connect to a website via its IP address?

When I type in PowerShell ping security.stackexchange.com ...it gives me the following: Pinging security.stackexchange.com [151.101.193.69] And as far as I understand, this IP address corresponds to ...
user avatar
1 vote
1 answer
157 views

Any Cloudflare's DNS over TLS (DoT) check + DNSSEC test?

In my original question from 2020, I was unsuccessful in my effort to setup Cloudflare's (link to docs) DNS over TLS (DoT) (link to wiki) in my old, and now decomissioned, router: Does Cloudflare'...
user avatar
0 votes
1 answer
35 views

Why nslookup by ip does not give the same domain name? [closed]

I first ran this command: nslookup www.certifiedhacker.com This was the output: Non-authoritative answer: www.certifiedhacker.com canonical name = certifiedhacker.com. Name: certifiedhacker.com ...
user avatar
0 votes
0 answers
38 views

How does the attacker guess the domain name in a DNS query for DNS cache poisoning

Prior to 2008 before Dan Kaminsky finds the DNS issue, the resolver checked only the Transaction ID. I have seen videos in which it is explained if an attacker manages to send a DNS response like (...
user avatar
0 votes
0 answers
328 views

Should I be worried about Ignoring query from non-local network in dnsmasq?

I am using a DNS forwarder, it's not open to the WWW (runs only in the LAN) and in the dnsmasq logs I noticed something off: Ignoring query from non-local network Has my network been breached? ...
user avatar
-1 votes
1 answer
75 views

DNSSEC is not configured for X website

I'm pretty new to this world of security and I'm doing some challenges trying to solve puzles of security, the thing is I have a website that is not loading it throws a timeout if I do ping, but ...
user avatar
2 votes
1 answer
54 views

Are authoritative nameservers vulnerable to DNS amplification/reflection or other kinds of attacks?

I have been learning about DNS over the last few days. For fun and learning, I wanted to try to set up an authoritative nameserver for my own domains. I also considered building a small tool for ...
user avatar
0 votes
0 answers
68 views

Should you use encrypted DNS before connecting to a VPN?

The ISP would still see the IP address of the VPN you're connecting to, but it would not be in plaintext compared to normal DNS from what I understand. Should one even bother or just let it be as it ...
user avatar
0 votes
0 answers
16 views

Infoblox BloxOne Security Best Practices

I'm looking for some guidance regarding security best practices for Infoblox BloxOne. What I'm looking for specifically are recommended security best practices based on experience using the product.
user avatar
  • 133
0 votes
2 answers
89 views

Is there any domain name one could use as a fake malicious website example?

I'm looking for some domain name whose purpose is to act as a bogus malicious/suspicious/untrusted website or endpoint to be used as an example or in documentation. IANA has reserved example.com for ...
user avatar
  • 111
0 votes
1 answer
88 views

On having received DNS records that are not my business

I am a fairly security conscious web developer. One of my clients has their website hosted outside their corporate system, but all other services, including email and domain services go through their ...
user avatar
0 votes
1 answer
52 views

How to get my exploit script served on arbitrary subdomain?

Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the ...
user avatar
  • 28.5k
2 votes
0 answers
77 views

All private subdomains found and listed, including those from my home IP

It's been my understanding in the past years that it's not easily possible to find out all the subdomains of a domain (unless these are used publicly, like in hyperlinks, etc), and likewise not easily ...
user avatar
  • 215
0 votes
1 answer
55 views

Paranoid Host Provider: When creating a fully redundant and failover domain name server (DNS) hierarchy - do we need to specify different TLDs?

Have have four name servers that control many other domains: ns1.domain-name-our-brand-example.com ns2.domain-name-our-brand-example.com ns3.domain-name-our-brand-example.com ns4.domain-name-our-brand-...
user avatar
2 votes
1 answer
151 views

Does using IP address over Tor with a one essential website expose me to any attack surface?

I routinely access www.email-provider-of-my-choice.com via browser over Tor. My browser enforces https-only mode and I opt for never saving my credentials with this provider. I tend to use the domain ...
user avatar
0 votes
1 answer
89 views

Can this logic with regard to checking Reverse DNS records be flawed?

For my web app, I hardcode a reverse DNS detection for common web crawlers. And for detecting them I use their Reverse DNS, which I always check whether it includes i.e. google.com. My questions would ...
user avatar
  • 190
0 votes
1 answer
148 views

My ISP seems to be intercepting my DNS requests even though my router is set to use Cloudflare [duplicate]

I am using an Indian ISP, one that is notorious for DNS hijacking and script injection (BSNL). I have my router set to use Cloudflare's Family DNS. But despite this, every time I attempt to access a ...
user avatar
  • 101
1 vote
1 answer
107 views

How to know which IP address is used for my DNS queries on macOS?

I'm not an expert, only have basic knowledge about all this but I'd like to understand what's going on so please bear with me. I'm currently using a VPN (IKEv2 protocol) on a macOS system and I can ...
user avatar
0 votes
0 answers
62 views

New rule on verifying domain for azureAD app registration

ref: https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-breaking-changes#appid-uri-in-single-tenant-applications-will-require-use-of-default-scheme-or-verified-domains We setup ...
user avatar
0 votes
1 answer
256 views

Risks of using custom DNS instead of my VPN DNS

If I use a custom DNS like NextDNS instead of my VPN service's DNS (NordVPN), where DNS queries go through the tunnel, will there be a privacy risk or some major disadvantages?
user avatar
  • 1
0 votes
1 answer
116 views

Subdomains resolving to bogon IPs

During experimentation with the gobuster tool, and trying to find the subdomains matches of a domain (let's call that testdomain.com), I got some strange results and I explain. The command used was $ ...
user avatar
1 vote
4 answers
186 views

Is there any need to configure DNS settings at device level when they can be easily altered at the router level? Will it increse any privacy/security?

I mean, for example, if you have configured your home router to Cloudflare's or Google's DNS settings - now, does it make any sense to alter you DNS settings -again- at the your Laptop or Mobile ...
user avatar
  • 11
0 votes
0 answers
73 views

CIS MDBR blocking major libraries (jQuery, gstatic)

The organization I work for uses Malicious Domain Blocking and Reporting (MDBR), which is a service provided by Center for Internet Security (CIS). MDBR technology prevents IT systems from connecting ...
user avatar
  • 101
0 votes
0 answers
26 views

What are the benefits of using a Cloudflare's DNS (not WARP) instead of ISP's DNS? [duplicate]

What advantages users get, specifically, from 'PRIVACY' point-of-view? Can ISP still see and log browsing history? Can user's location be still traceable? What's the ultimate security & privacy ...
user avatar
  • 11
0 votes
1 answer
179 views

SNI leakage prevention with proxy

In TLS 1.2 / HTTP(S) context, plaintext target hostname could potentially leak in 3 different ways: In DNS query prior to TCP/TLS/HTTP connection. In TLS handshake, ClientHello message, in SNI ...
user avatar
0 votes
1 answer
178 views

Are problems expected when a subdomain CNAME target has no CAA record?

Consider the following DNS setup of example.com: A 89.41.169.49 # this is for redirect.pizza CAA 0 issue "letsencrypt.org" www CNAME ghs....
user avatar
  • 190
0 votes
3 answers
179 views

Sending Mail from Different Server SPF Record

Firstly, i'm not a mail expert! My workplace owns the domain example.com, until recently we had an application hosted on the LAN that worked fine and sent emails from info@example.com to various ...
user avatar
2 votes
0 answers
123 views

using DoH/DoT with your ISP?

Is there a point to using DoT or DoH while your DNS is your ISP from a security (not privacy) standpoint? Assuming I trust my home network, could there be something along the way between my ISP and me ...
user avatar
  • 215
0 votes
1 answer
263 views

How to prevent DNS leaks without using a VPN

I use Windows 10, and I've configured my network to use Quad9 in Windows settings. I've also enabled DoH. Now, when I go to ExpressVPN DNS Leak Test webpage to know whether I have DNS leaks or not, it ...
user avatar
  • 1
0 votes
1 answer
194 views

DNSCrypt servers and privacy + security

I'm using open-source router firmware, which also provides my DNS and includes DNSCrypt feature for DNS resolving. As a cyber sec enthusiastic I like this feature, I've been using it for a while and I'...
user avatar
-1 votes
2 answers
199 views

How does DNS-01 validation for LetsEncrypt know what the right IP address is?

For my personal use, I bought a domain for internal ssl validation for my pfsense. I was able to get the LetsEncrypt's ACME script to successfully validate my domain and produce an ssl certificate for ...
user avatar
  • 166
-1 votes
1 answer
82 views

Are purchased domains from third party registers or hosting managers without Cpanels or VPS or Editable Pages hackable?

If someone buys a domain and one may type the url in but just sees a template page from the register.com but doesn’t purchase a cpanel or VPS or rootacess or any way to edit the website, does the ...
user avatar
  • 109
2 votes
1 answer
216 views

Does subdomain DNS cache poisoning depend on the authoritative name server ignoring requests for non-existing domains?

I'm reading "Introduction to Computer Security", Pearson New International Edition, 1st edition, by Goodrich and Tamassia. On the subject of DNS cache poisoning, they mention that a "...
user avatar
1 vote
0 answers
90 views

How following URL's will get open-redirection?

Reading about open-redirection from web application hackers handbook came across a test case in which the server-side is validating user supplied data that the application uses to set target for ...
user avatar
  • 11
7 votes
1 answer
846 views

Verifying that no malicious certificate has been issued while a DNS record was pointing to an uncontrolled IP

Given the scenario that: Victim rents VM1 from a cloud provider, and points his/her DNS record to that VM1's IP address Victim deletes VM1 and switches to a different cloud provider, and creates VM2 ...
user avatar
2 votes
2 answers
397 views

How can I test if a DNS Server is vulnerable to zone transfers with its IP?

How can I check if a DNS Server (let's say a DNS Server inside a private network) is vulnerable to zone transfer attacks when I only have its IP? I do not have any domain names. I see all these tools ...
user avatar
  • 121
3 votes
0 answers
105 views

Why would a random domain point to my IP address? [duplicate]

I have a little Wordpress honeypot set up. I have it specifically set up so that when the server's IP address is accessed, the wordpress website shows up, ie. no vhost. I was reading the site's access ...
user avatar
  • 103
1 vote
1 answer
78 views

Is unrestricted query access to dedicated DNS server considered an insecurity?

Let's say hypothetically a business has a network and some respective infrastructure. Importantly, a VPN for giving remote secure access to work resources, and a (not so)private DNS server for DNS but ...
user avatar
0 votes
1 answer
104 views

Will ISP know the location of public comment on Facebook via query link? [duplicate]

Let say that a person has made a comment on a Facebook group and in the browser address bar it will have a link with the following format. If someone clicked on this link, it will jump straight to the ...
user avatar
  • 137
0 votes
1 answer
549 views

Are my DNS requests encrypted when I use VPN and DNS of Google or others?

When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel. When I use others' DNS servers will my DNS traffic bounce through the VPN ...
user avatar
  • 193
1 vote
2 answers
216 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
user avatar
  • 113
1 vote
0 answers
278 views

What is the purpose of the critical flag being enabled (128) on a CAA IODEF record?

CAA, or Certificate Authority Authorization, provides a way to designate which CAs are allowed to create a Certificate for specific domains. This is done accomplished by publishing new caa DNS records,...
user avatar
  • 677
3 votes
3 answers
205 views

Can a domain be taken by someone else if custom nameservers are misconfigured?

Example: I own the domain example.com. Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
user avatar
1 vote
3 answers
736 views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
user avatar
  • 11
1 vote
0 answers
1k views

Snort DNS rule immersive labs [closed]

The question is "Create a rule to detect DNS requests to 'interbanx', then test the rule with the scanner and submit the token." My rule is: alert udp any any -> any 53 (msg:"alert&...
user avatar
1 vote
2 answers
166 views

How is DNS sinkhole being use?

I had some difficulty in grasping the concept on how "DNS sinkhole" is being utilize. Is it like setting up something similar to a honeypot to lure attackers away from the actual network, so ...
user avatar

1
2 3 4 5
15