Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
2 votes
0 answers
89 views

DNS Cache Poisoning With Multiple Requests

I am trying to understand this DNS cache poisoning from a textbook. Is it the case that the server does not check any pending requests for a given domain and will send all of the n "same" ...
user avatar
  • 21
1 vote
2 answers
645 views

Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't

I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10. I now want to emulate the "kill switch" feature of most ...
user avatar
1 vote
1 answer
383 views

What client-cert validation can be gleaned from DNS/reverse DNS lookup?

I'm learning about X509 certs used in client-cert authentication to https endpoints. I have a nice Python script that checks many facets of the client-cert. Is there any validation that can be ...
user avatar
1 vote
1 answer
126 views

Rate Limit DNS Subdomain Requests

I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing - generally they choose the organization name. ...
user avatar
  • 113
2 votes
2 answers
242 views

How is a DNS wildcard a security issue for GitHub Pages?

GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so: GitHub must be set up to recognize that an ...
user avatar
  • 8,913
1 vote
1 answer
323 views

DNS spoofing over https [duplicate]

If a device sends a request to https://example.com and someone spoofs the DNS response to redirect the request to some malicious server. Would the attacker be able to modify the packets during the TLS ...
user avatar
  • 13
0 votes
1 answer
89 views

Should I redirect http request to https from my system's application or from DNS or other? [closed]

I want to create a web server that does redirects HTTP to HTTPS. What is the simplest method to do this but also secure? Should the DNS handle this? (For example, Route53) I used to do this with my ...
user avatar
  • 101
1 vote
2 answers
100 views

I have a custom domain for email. Do I need to configure DNS to prevent outgoing text messages with an address from my domain? [duplicate]

I own a custom domain that I use for e-mail. The mail server is configured with a catch-all that redirects messages to any user to my inbox. For the first time this afternoon, I received a benign &...
user avatar
  • 217
5 votes
1 answer
563 views

Can DPI block websites with ESNI?

I live in a country with censorship and was wondering if it's possible to bypass DPI by just enabling ESNI, DNS over HTTPS and Always HTTPS? If not, what else should I enable to bypass DPI firewall ...
user avatar
1 vote
0 answers
859 views

Advantages of running a local private recursive DNS server?

My home network is "governed" by my ISP's router. Sometimes I saw strange packets outside my private IP range, appearing at my computers interfaces. Maybe something crossed VLANs, etc., I do ...
user avatar
  • 171
4 votes
0 answers
365 views

Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable

By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A. Is there any risk to this vulnerability or ...
user avatar
1 vote
0 answers
100 views

Openvpn not hiding dns, using tcp

I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
user avatar
  • 11
1 vote
1 answer
105 views

Evaluate this approach: set production DNS to point to 127.0.0.1

I am evaluating a vendor whose technology takes the following approach: My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
user avatar
0 votes
2 answers
108 views

Why must I use numbers when displaying SSHFP DNS records?

I'm writing a DNS client, where records are queried and shown to the user, and I'm adding support for the SSHFP record type, which stores SSH fingerprints. Records of this type have three fields: The ...
user avatar
  • 103
0 votes
0 answers
83 views

Find configured domains accepted by a reverse proxy

Context I am playing around with a machine from hack the box. I found what appears to be a squid v. 4.6 listening on port 3128. None of my requests works < HTTP/1.1 400 Bad Request < Server: ...
user avatar
  • 111
1 vote
2 answers
474 views

Does Cloudflare's DNS over TLS (DoT) implement DNSSEC too?

I am confused about if I decided to implement DNS over TLS (DoT), would I lose DNSSEC? Details: I am connected with IPv4 + IPv6 Cloudflare DNS directly in my home OpenWrt router. I love the idea of ...
user avatar
2 votes
3 answers
171 views

Is having a compromised TLD nameserver a security threat?

I strayed into the .PH TLD record on the IANA root zone database and found the first nameserver interesting. I don't really know why they're there and I'm not in the right to assume, but considering ...
user avatar
  • 910
0 votes
0 answers
15 views

DNS over HTTPS (DoH) [duplicate]

DNS over HTTPS aims to increase user privacy and security by preventing eavesdropping and manipulation of DNS data using the HTTPS protocol to encrypt the data between the client and the DoH based DNS ...
user avatar
1 vote
1 answer
192 views

Is it possible for a domain to be faked?

I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
user avatar
  • 562
9 votes
2 answers
7k views

What does my ISP see if I change my DNS server?

I have an interesting question and I really want to get an answer to this. What does my ISP see if I change my DNS server and I use an HTTPS connection? Firstly, when I use my ISP's DNS server: So, I ...
user avatar
  • 193
0 votes
0 answers
105 views

Why is there no DNS mechanism for requiring HTTPS on a domain?

Typically, HTTPS redirection happens like this: The user clicks or types an HTTP link, e.g. http://example.com/url. If the browser has seen a Permanent (301) redirect to HTTPS for that exact URL, it ...
user avatar
0 votes
2 answers
3k views

Will 1.1.1.1 hide my traffic from my landlord's router?

I've read different articles about https://1.1.1.1/ and am confused since they conflict. A couple examples: effectively making your traffic invisible to snoopers on your local network but not ...
user avatar
  • 315
0 votes
1 answer
1k views

How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]

Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...
user avatar
  • 1
0 votes
0 answers
729 views

MITMPROXY on router

I am familiar with MITM LAN attacks using dnsspoof and arpspoof to read client data. Instead of spoofing the DNS and impersonating the router on my physical machine, I want to set up a MITM LAN ...
user avatar
2 votes
1 answer
2k views

Why would hackers attack a DNS server with a DoS?

I wake up this morning to a rebooted server. The DNS server was running at over 100%. After a little bit of work, I got fail2ban in place to block all of those requests. The requests themselves are ...
user avatar
25 votes
5 answers
8k views

Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?

I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
user avatar
0 votes
1 answer
257 views

dig returns different MX record, can anyone explain why?

I have a domain lets call it example.com when I do: dig example.com MX +short, it returns: 10 mx1.[Internet_Service_Provider_Domain] so, I decided to trace the DNS to check if there any possible DNS ...
user avatar
1 vote
1 answer
161 views

How do DoT and DoH facilitate fingerprinting by resolver operators?

https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it Provides more information than regular DNS to resolver operators in order to fingerprint clients How so?
user avatar
  • 135
3 votes
1 answer
537 views

DNS 3rd party risks

I'd like to know what are the risks having a subdomain managed by third party. For example, I manage my own DNS servers to serve mydomain.example which provide some internal and public content. If I ...
user avatar
  • 31
0 votes
1 answer
255 views

DKIM and CNAME or DNAME

As far as I understand, there should be no problems with using CNAME or DNAME records in connection with DKIM. That is, while the DKIM record for verifiying a mail from someone@example.com wants to be ...
user avatar
0 votes
1 answer
813 views

How does openvpn work for only certain servers?

I got a *.openvpn from work and I monitored the traffic on wireshark. On my normal vpn every traffic is routed via the vpn (as expected). But with this work vpn only the traffic that uses the work ...
user avatar
  • 103
2 votes
0 answers
534 views

HTML Injection to blind SSRF testing retrieves only DNS Query

I recently came across an application that was vulnerable to HTML injection on the invite function. When I insert <img src="image.jpg"> the image got rendered on the mail I received. I ...
user avatar
3 votes
1 answer
2k views

Is there a security vulnerability in setting a public DNS entry to a private IP Address?

I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
user avatar
  • 133
12 votes
1 answer
3k views

Hijacking stale DNS entry to point to your own website

Context and system configuration: AWS EC2 instance with a public IP address AWS Route53-managed DNS with a somesubdomain.somedomain.io pointing to the above IP address Above AWS EC2 instance was not ...
user avatar
1 vote
2 answers
4k views

Does it make sense to use CloudFlare's DNS in addition to NordVPN?

Starting at the Computer level, NordVPN gets installed. But according to the experts who know a lot better, a VPN isn't good enough. So going to the router's IPv4 network settings, the default DNS is ...
user avatar
  • 13
3 votes
2 answers
1k views

Problems with using a non-reserved top-level domain for local DNS resolution

A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
user avatar
  • 175
0 votes
1 answer
547 views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
user avatar
0 votes
0 answers
77 views

Is there any reason not to enable DNSSEC? [duplicate]

Google Domains' DNS management has a link that says Enable DNSSEC. And, as I understand it, this prevents spoofing of DNS responses. And, that sounds great! So, why wouldn't I want to enable DNSSEC? ...
user avatar
  • 711
-2 votes
1 answer
100 views

How did these entries get into the Public DNS? [closed]

try ping these (and everything in between) 021111111111 021555555555 What are they?
user avatar
  • 859
1 vote
0 answers
193 views

Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?

I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers. To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
user avatar
  • 11
2 votes
2 answers
123 views

Impersonation of TLS host with own wlan network

Problem: I have a local machine (IoT, lets call it MCC) which connects via SSL to a website (mcc.com) to get some JSON data. I would like to send modified JSON from my own server. Idea: Setup a local ...
user avatar
3 votes
2 answers
170 views

How to find out where CNAME had resolved to in the past?

Are there any tools for this? I am doing some research into pentesting and subdomain takeovers with cloud providers like AWS and Azure. I have a list of subdomains (A records) that could be used for ...
user avatar
  • 31
2 votes
1 answer
214 views

Seems my CNAMEs got "curled". Somebody please explain this to me

According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
user avatar
0 votes
0 answers
406 views

Monitor HTTPS URL logging of a specific device of a Network

Goal The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store. Ex. Alexa, Chromecast, and maybe ...
user avatar
  • 125
32 votes
6 answers
4k views

Is it possible for a name server provider to hijack MX records?

Let’s say: We buy a domain from http://cheap-unsecure-domains.example. Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service. We set some MX ...
user avatar
  • 423
0 votes
1 answer
147 views

Spoofed DNS answers ignored by target machine applications

Attacker: Arch Linux Target: Windows 10 Scenario The attackers launches an ARP spoof attack to redirect all target traffic to the attacker. (This works) The target sends DNS queries for domain name ...
user avatar
  • 13
2 votes
1 answer
682 views

How dangerous is it to open my DNS server to the world?

I'm using pihole as my DNS on the LAN but I'm trying to use it as my "global" DNS server wherever I am on the planet. One solution is to use a VPN on my LAN and pihole being set as the default DNS ...
user avatar
  • 161
1 vote
2 answers
199 views

What stops a malicious DNS subdomain provider from impersonating my website?

First, some background: The DNS-01 verification method of Let's Encrypt requires you to add a TXT record to a special subdomain your domain name to prove your identity. With ACMEv2, this can allow you ...
user avatar
  • 175
2 votes
2 answers
160 views

Private Authoritive Recursive DNS

In the bind9 config (Centos8) there is a note saying If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. I would like to know why and if this is still a concern if the DNS ...
user avatar
  • 151
3 votes
1 answer
684 views

Does Unbound re-use TLS connections for DoT forwarding?

Unbound has the option to use DNS over TLS as an upstream (through the forward-tls-upstream setting). CludFlare's 1.1.1.1 service offers this; also through TOR. My question is whether Unbound will ...
user avatar
  • 131

1
2
3 4 5
15