Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
0
votes
1answer
65 views

How can I test if a DNS Server is vulnerable to zone transfers with its IP?

How can I check if a DNS Server (let's say a DNS Server inside a private network) is vulnerable to zone transfer attacks when I only have its IP? I do not have any domain names. I see all these tools ...
3
votes
0answers
98 views

Why would a random domain point to my IP address? [duplicate]

I have a little Wordpress honeypot set up. I have it specifically set up so that when the server's IP address is accessed, the wordpress website shows up, ie. no vhost. I was reading the site's access ...
1
vote
1answer
32 views

Is unrestricted query access to dedicated DNS server considered an insecurity?

Let's say hypothetically a business has a network and some respective infrastructure. Importantly, a VPN for giving remote secure access to work resources, and a (not so)private DNS server for DNS but ...
0
votes
1answer
50 views

Will ISP know the location of public comment on Facebook via query link? [duplicate]

Let say that a person has made a comment on a Facebook group and in the browser address bar it will have a link with the following format. If someone clicked on this link, it will jump straight to the ...
0
votes
1answer
58 views

Are my DNS requests encrypted when I use VPN and DNS of Google or others?

When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel. When I use others' DNS servers will my DNS traffic bounce through the VPN ...
1
vote
2answers
75 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
1
vote
0answers
40 views

What is the purpose of the critical flag being enabled (128) on a CAA IODEF record?

CAA, or Certificate Authority Authorization, provides a way to designate which CAs are allowed to create a Certificate for specific domains. This is done accomplished by publishing new caa DNS records,...
3
votes
1answer
139 views

Can a domain be taken by someone else if custom nameservers are misconfigured?

Example: I own the domain example.com. Instead of using the nameservers set up by default by the registrar, I set up my own nameservers on my own machines with bind9. Let's say that at the beginning, ...
1
vote
3answers
111 views

Does domain resolve to CDN (Cloudfront) IP and not the actual web-app server?

If a web-app is using cloudfront as CDN, what happens if I ping the domain? Am I pinging the cloudfront endpoint? Or the web-app server? Why is it DNS resolution resolves to different IPs in this case?...
0
votes
0answers
37 views

DNS Zone transfer scope for pentest

Say if route53 is used to route traffic to your web-app, is dns zone transfer on the name server (that'a authoritative for the hosted zone) automatically out of scope because its AWS?
1
vote
0answers
166 views

Snort DNS rule immersive labs [closed]

The question is "Create a rule to detect DNS requests to 'interbanx', then test the rule with the scanner and submit the token." My rule is: alert udp any any -> any 53 (msg:"alert&...
1
vote
2answers
75 views

How is DNS sinkhole being use?

I had some difficulty in grasping the concept on how "DNS sinkhole" is being utilize. Is it like setting up something similar to a honeypot to lure attackers away from the actual network, so ...
2
votes
0answers
51 views

DNS Cache Poisoning With Multiple Requests

I am trying to understand this DNS cache poisoning from a textbook. Is it the case that the server does not check any pending requests for a given domain and will send all of the n "same" ...
1
vote
2answers
93 views

Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't

I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10. I now want to emulate the "kill switch" feature of most ...
1
vote
1answer
90 views

What client-cert validation can be gleaned from DNS/reverse DNS lookup?

I'm learning about X509 certs used in client-cert authentication to https endpoints. I have a nice Python script that checks many facets of the client-cert. Is there any validation that can be ...
1
vote
1answer
47 views

Rate Limit DNS Subdomain Requests

I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing - generally they choose the organization name. ...
2
votes
2answers
118 views

How is a DNS wildcard a security issue for GitHub Pages?

GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so: GitHub must be set up to recognize that an ...
1
vote
1answer
70 views

DNS spoofing over https [duplicate]

If a device sends a request to https://example.com and someone spoofs the DNS response to redirect the request to some malicious server. Would the attacker be able to modify the packets during the TLS ...
0
votes
1answer
50 views

Should I redirect http request to https from my system's application or from DNS or other? [closed]

I want to create a web server that does redirects HTTP to HTTPS. What is the simplest method to do this but also secure? Should the DNS handle this? (For example, Route53) I used to do this with my ...
1
vote
2answers
50 views

I have a custom domain for email. Do I need to configure DNS to prevent outgoing text messages with an address from my domain? [duplicate]

I own a custom domain that I use for e-mail. The mail server is configured with a catch-all that redirects messages to any user to my inbox. For the first time this afternoon, I received a benign &...
0
votes
0answers
41 views

What is the way of my packages to the server with OpenDNS and VPN and without them?

All the next are only my assumptions. There are simplified and abstruct models. I want to know what is the way of my packeges when I use the ISP DNS and OpenDNS. And what is the way when I use VPN and ...
5
votes
1answer
393 views

Can DPI block websites with ESNI?

I live in a country with censorship and was wondering if it's possible to bypass DPI by just enabling ESNI, DNS over HTTPS and Always HTTPS? If not, what else should I enable to bypass DPI firewall ...
1
vote
0answers
225 views

Advantages of running a local private recursive DNS server?

My home network is "governed" by my ISP's router. Sometimes I saw strange packets outside my private IP range, appearing at my computers interfaces. Maybe something crossed VLANs, etc., I do ...
4
votes
0answers
109 views

Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable

By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A. Is there any risk to this vulnerability or ...
1
vote
0answers
46 views

Openvpn not hiding dns, using tcp

I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
1
vote
1answer
60 views

Evaluate this approach: set production DNS to point to 127.0.0.1

I am evaluating a vendor whose technology takes the following approach: My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
0
votes
0answers
30 views

How is it possible for a Company to block Websites when at home, using DNS over HTTPS and no Certificate issued by the Company? [duplicate]

Let's say, I am in my home office connected through a VPN with the company network with a company device. When I am using Firefox, not controlled by the Company like Chrome or Edge, the certificates ...
0
votes
2answers
55 views

Why must I use numbers when displaying SSHFP DNS records?

I'm writing a DNS client, where records are queried and shown to the user, and I'm adding support for the SSHFP record type, which stores SSH fingerprints. Records of this type have three fields: The ...
0
votes
0answers
43 views

Find configured domains accepted by a reverse proxy

Context I am playing around with a machine from hack the box. I found what appears to be a squid v. 4.6 listening on port 3128. None of my requests works < HTTP/1.1 400 Bad Request < Server: ...
1
vote
2answers
216 views

Does Cloudflare's DNS over TLS (DoT) implement DNSSEC too?

I will shoot the question straight: I am confused about if I decided to implement DNS over TLS (DoT), would I lose DNSSEC? Little bit of details: I am connected with IPv4 + IPv6 Cloudflare DNS ...
2
votes
3answers
108 views

Is having a compromised TLD nameserver a security threat?

I strayed into the .PH TLD record on the IANA root zone database and found the first nameserver interesting. I don't really know why they're there and I'm not in the right to assume, but considering ...
0
votes
0answers
12 views

DNS over HTTPS (DoH) [duplicate]

DNS over HTTPS aims to increase user privacy and security by preventing eavesdropping and manipulation of DNS data using the HTTPS protocol to encrypt the data between the client and the DoH based DNS ...
1
vote
1answer
149 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
10
votes
2answers
4k views

What does my ISP see if I change my DNS server?

I have an interesting question and I really want to get an answer to this. What does my ISP see if I change my DNS server and I use an HTTPS connection? Firstly, when I use my ISP's DNS server: So, I ...
0
votes
0answers
56 views

Why is there no DNS mechanism for requiring HTTPS on a domain?

Typically, HTTPS redirection happens like this: The user clicks or types an HTTP link, e.g. http://example.com/url. If the browser has seen a Permanent (301) redirect to HTTPS for that exact URL, it ...
0
votes
2answers
1k views

Will 1.1.1.1 hide my traffic from my landlord's router?

I've read different articles about https://1.1.1.1/ and am confused since they conflict. A couple examples: effectively making your traffic invisible to snoopers on your local network but not ...
0
votes
1answer
488 views

How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]

Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...
0
votes
0answers
429 views

Gsuite compromised - changing DNS MX records to prevent attackers

We have lost access to Gsuite admin portal as the account has been compromised by phishing emails. Upon trying to recover the account, we can verify SMS sent to the number but the recovery email ...
0
votes
0answers
314 views

MITMPROXY on router

I am familiar with MITM LAN attacks using dnsspoof and arpspoof to read client data. Instead of spoofing the DNS and impersonating the router on my physical machine, I want to set up a MITM LAN ...
2
votes
1answer
1k views

Why would hackers attack a DNS server with a DoS?

I wake up this morning to a rebooted server. The DNS server was running at over 100%. After a little bit of work, I got fail2ban in place to block all of those requests. The requests themselves are ...
24
votes
5answers
6k views

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
0
votes
1answer
147 views

dig returns different MX record, can anyone explain why?

I have a domain lets call it example.com when I do: dig example.com MX +short, it returns: 10 mx1.[Internet_Service_Provider_Domain] so, I decided to trace the DNS to check if there any possible DNS ...
1
vote
1answer
105 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
3
votes
1answer
246 views

DNS 3rd party risks

I'd like to know what are the risks having a subdomain managed by third party. For example, I manage my own DNS servers to serve mydomain.example which provide some internal and public content. If I ...
0
votes
1answer
90 views

DKIM and CNAME or DNAME

As far as I understand, there should be no problems with using CNAME or DNAME records in connection with DKIM. That is, while the DKIM record for verifiying a mail from someone@example.com wants to be ...
0
votes
1answer
436 views

How does openvpn work for only certain servers?

I got a *.openvpn from work and I monitored the traffic on wireshark. On my normal vpn every traffic is routed via the vpn (as expected). But with this work vpn only the traffic that uses the work ...
2
votes
0answers
336 views

HTML Injection to blind SSRF testing retrieves only DNS Query

I recently came across an application that was vulnerable to HTML injection on the invite function. When I insert <img src="image.jpg"> the image got rendered on the mail I received. I ...
3
votes
1answer
699 views

Is there a security vulnerability in setting a public DNS entry to a private IP Address?

I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
12
votes
1answer
2k views

Hijacking stale DNS entry to point to your own website

Context and system configuration: AWS EC2 instance with a public IP address AWS Route53-managed DNS with a somesubdomain.somedomain.io pointing to the above IP address Above AWS EC2 instance was not ...
1
vote
2answers
2k views

Does it make sense to use CloudFlare's DNS in addition to NordVPN?

Starting at the Computer level, NordVPN gets installed. But according to the experts who know a lot better, a VPN isn't good enough. So going to the router's IPv4 network settings, the default DNS is ...

1
2 3 4 5
14