Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
0
votes
0answers
50 views

What Are These Adapter TCP/IP Settings For? [closed]

What are those settings for, and which options would be the best for security?
2
votes
1answer
112 views

Does subdomain DNS cache poisoning depend on the authoritative name server ignoring requests for non-existing domains?

I'm reading "Introduction to Computer Security", Pearson New International Edition, 1st edition, by Goodrich and Tamassia. On the subject of DNS cache poisoning, they mention that a "...
0
votes
1answer
84 views

How can I test if a DNS Server is vulnerable to zone transfers with its IP?

How can I check if a DNS Server (let's say a DNS Server inside a private network) is vulnerable to zone transfer attacks when I only have its IP? I do not have any domain names. I see all these tools ...
3
votes
3answers
162 views

Can a domain be taken by someone else if custom nameservers are misconfigured?

Example: I own the domain example.com. Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
7
votes
1answer
772 views

Verifying that no malicious certificate has been issued while a DNS record was pointing to an uncontrolled IP

Given the scenario that: Victim rents VM1 from a cloud provider, and points his/her DNS record to that VM1's IP address Victim deletes VM1 and switches to a different cloud provider, and creates VM2 ...
0
votes
1answer
105 views

Are my DNS requests encrypted when I use VPN and DNS of Google or others?

When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel. When I use others' DNS servers will my DNS traffic bounce through the VPN ...
1
vote
0answers
48 views

How following URL's will get open-redirection?

Reading about open-redirection from web application hackers handbook came across a test case in which the server-side is validating user supplied data that the application uses to set target for ...
0
votes
1answer
188 views

How to detect malicious actor altering DNS responses?

I am trying to detect what is causing my DNS to return fake IP addresses for domains like apple, orange, etc. which obviously don't exist. If I do following on my Windows machine: ipconfig /flushdns ...
3
votes
0answers
101 views

Why would a random domain point to my IP address? [duplicate]

I have a little Wordpress honeypot set up. I have it specifically set up so that when the server's IP address is accessed, the wordpress website shows up, ie. no vhost. I was reading the site's access ...
1
vote
1answer
106 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
0
votes
1answer
474 views

Relying on internal DNS server (Domain Controller) on a DMZ Server

A couple of questions regarding DNS traffic between TRUST and DMZ and best practices. Are there any significant risks in relying on internal DNS from a web server hosted in a DMZ zone? Has the DNS ...
1
vote
1answer
54 views

Interconnected DNS Information [closed]

One of the methods to verify if a domain is legitimate or not is to check out its DNS records and their interconnection. The ones I could find are. NS and PTR record A and AAAA pointing to same ...
1
vote
1answer
35 views

Is unrestricted query access to dedicated DNS server considered an insecurity?

Let's say hypothetically a business has a network and some respective infrastructure. Importantly, a VPN for giving remote secure access to work resources, and a (not so)private DNS server for DNS but ...
0
votes
1answer
55 views

Will ISP know the location of public comment on Facebook via query link? [duplicate]

Let say that a person has made a comment on a Facebook group and in the browser address bar it will have a link with the following format. If someone clicked on this link, it will jump straight to the ...
0
votes
1answer
156 views

dig returns different MX record, can anyone explain why?

I have a domain lets call it example.com when I do: dig example.com MX +short, it returns: 10 mx1.[Internet_Service_Provider_Domain] so, I decided to trace the DNS to check if there any possible DNS ...
10
votes
1answer
8k views

How can I look up a Certificate Authorities CAA record value?

I'd like to publish a CAA record for a domain and while I am familiar with the format I do not know what to use for the value. For example, Comodo certs would use 0 issue "comodoca.com" and Certbot ...
1
vote
2answers
79 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
1
vote
0answers
50 views

What is the purpose of the critical flag being enabled (128) on a CAA IODEF record?

CAA, or Certificate Authority Authorization, provides a way to designate which CAs are allowed to create a Certificate for specific domains. This is done accomplished by publishing new caa DNS records,...
4
votes
3answers
473 views

How can I prevent abuse of our public WiFi network?

One of our customers runs a holiday park with <100 users on it. We currently have a mikrotik in place that prevents torrenting etc, however their line has been cut off as someone there has been ...
1
vote
1answer
645 views

DNS Hijack: Only spoofing sites listed in etter.dns

I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
1
vote
2answers
107 views

Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't

I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10. I now want to emulate the "kill switch" feature of most ...
1
vote
3answers
167 views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
0
votes
0answers
37 views

DNS Zone transfer scope for pentest

Say if route53 is used to route traffic to your web-app, is dns zone transfer on the name server (that'a authoritative for the hosted zone) automatically out of scope because its AWS?
1
vote
2answers
80 views

How is DNS sinkhole being use?

I had some difficulty in grasping the concept on how "DNS sinkhole" is being utilize. Is it like setting up something similar to a honeypot to lure attackers away from the actual network, so ...
0
votes
1answer
5k views

DNS Cache Poisoning and Snooping

I'm trying to do two things here. The first is poison the cache of a target DNS server. A scan has suggested the network I'm attacking is vulnerable to CVE-1999-0024. My understanding of this ...
3
votes
2answers
102 views

How to find out where CNAME had resolved to in the past?

Are there any tools for this? I am doing some research into pentesting and subdomain takeovers with cloud providers like AWS and Azure. I have a list of subdomains (A records) that could be used for ...
1
vote
0answers
333 views

Snort DNS rule immersive labs [closed]

The question is "Create a rule to detect DNS requests to 'interbanx', then test the rule with the scanner and submit the token." My rule is: alert udp any any -> any 53 (msg:"alert&...
2
votes
0answers
53 views

DNS Cache Poisoning With Multiple Requests

I am trying to understand this DNS cache poisoning from a textbook. Is it the case that the server does not check any pending requests for a given domain and will send all of the n "same" ...
31
votes
2answers
87k views

DNS zone transfer attack

Can anyone explain what is DNS zone transfer attack or give any link, paper? I have already googled, but could not find anything meaningful.
0
votes
1answer
122 views

Why am I seeing SSL events resolve to OpenDNS IPs?

This organization I'm working for uses OpenDNS/Cisco Umbrella. I'm confused as to why I'm seeing requests for SSL traffic resolved to 146.112.255.155 146.112.250.83 146.112.250.64 146.112.250.87 146....
1
vote
1answer
105 views

What client-cert validation can be gleaned from DNS/reverse DNS lookup?

I'm learning about X509 certs used in client-cert authentication to https endpoints. I have a nice Python script that checks many facets of the client-cert. Is there any validation that can be ...
1
vote
2answers
2k views

Does it make sense to use CloudFlare's DNS in addition to NordVPN?

Starting at the Computer level, NordVPN gets installed. But according to the experts who know a lot better, a VPN isn't good enough. So going to the router's IPv4 network settings, the default DNS is ...
1
vote
1answer
49 views

Rate Limit DNS Subdomain Requests

I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing - generally they choose the organization name. ...
2
votes
2answers
131 views

How is a DNS wildcard a security issue for GitHub Pages?

GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so: GitHub must be set up to recognize that an ...
8
votes
3answers
12k views

DNSspoof not working

My aim is to DNSspoof. My network is using a wireless router with the address 192.168.1.1 and primary DNS is the same as the router address. I have enabled Kernel IP forward in Linux. DNS host file ...
2
votes
2answers
383 views

What are the implications of activating “obtain DNS server address automatically”?

There's a (private, password-protected) WiFi network (not under my control) which at first did not work* for my laptop - until I disabled the option that caused it to use google's DNS server. [*] not ...
53
votes
6answers
221k views

If I use a VPN, who will resolve my DNS requests?

Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ...
1
vote
1answer
84 views

DNS spoofing over https [duplicate]

If a device sends a request to https://example.com and someone spoofs the DNS response to redirect the request to some malicious server. Would the attacker be able to modify the packets during the TLS ...
0
votes
1answer
50 views

Should I redirect http request to https from my system's application or from DNS or other? [closed]

I want to create a web server that does redirects HTTP to HTTPS. What is the simplest method to do this but also secure? Should the DNS handle this? (For example, Route53) I used to do this with my ...
1
vote
2answers
51 views

I have a custom domain for email. Do I need to configure DNS to prevent outgoing text messages with an address from my domain? [duplicate]

I own a custom domain that I use for e-mail. The mail server is configured with a catch-all that redirects messages to any user to my inbox. For the first time this afternoon, I received a benign &...
0
votes
0answers
41 views

What is the way of my packages to the server with OpenDNS and VPN and without them?

All the next are only my assumptions. There are simplified and abstruct models. I want to know what is the way of my packeges when I use the ISP DNS and OpenDNS. And what is the way when I use VPN and ...
4
votes
3answers
9k views

Do SPF records apply to all subdomains?

Does a SPF record apply only on the domain it’s setup for or also for all it’s subdomains? For example an SPF record that is configured for the domain example.com will set the policy for mails ending ...
5
votes
1answer
413 views

Can DPI block websites with ESNI?

I live in a country with censorship and was wondering if it's possible to bypass DPI by just enabling ESNI, DNS over HTTPS and Always HTTPS? If not, what else should I enable to bypass DPI firewall ...
1
vote
0answers
275 views

Advantages of running a local private recursive DNS server?

My home network is "governed" by my ISP's router. Sometimes I saw strange packets outside my private IP range, appearing at my computers interfaces. Maybe something crossed VLANs, etc., I do ...
4
votes
0answers
116 views

Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable

By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A. Is there any risk to this vulnerability or ...
1
vote
1answer
61 views

Evaluate this approach: set production DNS to point to 127.0.0.1

I am evaluating a vendor whose technology takes the following approach: My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
1
vote
0answers
46 views

Openvpn not hiding dns, using tcp

I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
0
votes
0answers
30 views

How is it possible for a Company to block Websites when at home, using DNS over HTTPS and no Certificate issued by the Company? [duplicate]

Let's say, I am in my home office connected through a VPN with the company network with a company device. When I am using Firefox, not controlled by the Company like Chrome or Edge, the certificates ...
4
votes
3answers
664 views

Why are DNS requests visible with DNS over HTTPS enabled?

So, Firefox 73 rolled out today and with it comes a new DNS option called NextDNS. I thought of giving it a shot and clicked "Enable DNS over HTTPS" and selected NextDNS. Now, my understanding of ...
0
votes
2answers
57 views

Why must I use numbers when displaying SSHFP DNS records?

I'm writing a DNS client, where records are queried and shown to the user, and I'm adding support for the SSHFP record type, which stores SSH fingerprints. Records of this type have three fields: The ...

1
2 3 4 5
15