Questions tagged [dns]
The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
733
questions
2
votes
0
answers
89
views
DNS Cache Poisoning With Multiple Requests
I am trying to understand this DNS cache poisoning from a textbook.
Is it the case that the server does not check any pending requests for a given domain and will send all of the n "same" ...
- 21
1
vote
2
answers
645
views
Using iptables to set up a killswitch for openvpn: DNS requests are blocked but they shouldn't
I bought a subscription to a VPN service and I am using the openvpn 2.5.1 client to connect to it. I am using Ubuntu 20.10.
I now want to emulate the "kill switch" feature of most ...
- 495
1
vote
1
answer
383
views
What client-cert validation can be gleaned from DNS/reverse DNS lookup?
I'm learning about X509 certs used in client-cert authentication to https endpoints. I have a nice Python script that checks many facets of the client-cert.
Is there any validation that can be ...
- 297
1
vote
1
answer
126
views
Rate Limit DNS Subdomain Requests
I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing - generally they choose the organization name. ...
- 113
2
votes
2
answers
242
views
How is a DNS wildcard a security issue for GitHub Pages?
GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so:
GitHub must be set up to recognize that an ...
- 8,913
1
vote
1
answer
323
views
DNS spoofing over https [duplicate]
If a device sends a request to https://example.com and someone spoofs the DNS response to redirect the request to some malicious server. Would the attacker be able to modify the packets during the TLS ...
- 13
0
votes
1
answer
89
views
Should I redirect http request to https from my system's application or from DNS or other? [closed]
I want to create a web server that does redirects HTTP to HTTPS. What is the simplest method to do this but also secure? Should the DNS handle this? (For example, Route53)
I used to do this with my ...
- 101
1
vote
2
answers
100
views
I have a custom domain for email. Do I need to configure DNS to prevent outgoing text messages with an address from my domain? [duplicate]
I own a custom domain that I use for e-mail. The mail server is configured with a catch-all that redirects messages to any user to my inbox. For the first time this afternoon, I received a benign &...
- 217
5
votes
1
answer
563
views
Can DPI block websites with ESNI?
I live in a country with censorship and was wondering if it's possible to bypass DPI by just enabling ESNI, DNS over HTTPS and Always HTTPS? If not, what else should I enable to bypass DPI firewall ...
- 153
1
vote
0
answers
859
views
Advantages of running a local private recursive DNS server?
My home network is "governed" by my ISP's router. Sometimes I saw strange packets outside my private IP range, appearing at my computers interfaces. Maybe something crossed VLANs, etc., I do ...
- 171
4
votes
0
answers
365
views
Is an out-of-band request via DNS by abusing the X-Forwarded-For header exploitable
By changing the X-Forwarded-For header in a request, I am able to have it sent an OOB interaction with Burp Collaborator requesting a DNS lookup of type A.
Is there any risk to this vulnerability or ...
1
vote
0
answers
100
views
Openvpn not hiding dns, using tcp
I am using same configuration files for OpenVPN, same operating system (ubuntu 20) on two different laptops, but I notice with Wireshark, then on one of them, the VPN connection goes through UDP, ...
- 11
1
vote
1
answer
105
views
Evaluate this approach: set production DNS to point to 127.0.0.1
I am evaluating a vendor whose technology takes the following approach:
My website asks user to install vendor's executable (EXE) on their machine. This EXE does operations that cannot be done in-...
- 129
0
votes
2
answers
108
views
Why must I use numbers when displaying SSHFP DNS records?
I'm writing a DNS client, where records are queried and shown to the user, and I'm adding support for the SSHFP record type, which stores SSH fingerprints. Records of this type have three fields:
The ...
- 103
0
votes
0
answers
83
views
Find configured domains accepted by a reverse proxy
Context
I am playing around with a machine from hack the box. I found what appears to be a squid v. 4.6 listening on port 3128. None of my requests works
< HTTP/1.1 400 Bad Request
< Server: ...
- 111
1
vote
2
answers
474
views
Does Cloudflare's DNS over TLS (DoT) implement DNSSEC too?
I am confused about if I decided to implement DNS over TLS (DoT), would I lose DNSSEC?
Details:
I am connected with IPv4 + IPv6 Cloudflare DNS directly in my home OpenWrt router.
I love the idea of ...
- 1,512
2
votes
3
answers
171
views
Is having a compromised TLD nameserver a security threat?
I strayed into the .PH TLD record on the IANA root zone database and found the first nameserver interesting.
I don't really know why they're there and I'm not in the right to assume, but considering ...
- 910
0
votes
0
answers
15
views
DNS over HTTPS (DoH) [duplicate]
DNS over HTTPS aims to increase user privacy and security by
preventing eavesdropping and manipulation of DNS data using the HTTPS
protocol to encrypt the data between the client and the DoH based DNS
...
- 75
1
vote
1
answer
192
views
Is it possible for a domain to be faked?
I was talking to PayPal customer service and they were trying to tell me PayPal does not have any third parties, so when I shown them https://www.paypal.com/uk/webapps/mpp/ua/third-parties-list they ...
- 562
9
votes
2
answers
7k
views
What does my ISP see if I change my DNS server?
I have an interesting question and I really want to get an answer to this.
What does my ISP see if I change my DNS server and I use an HTTPS connection?
Firstly, when I use my ISP's DNS server:
So, I ...
- 193
0
votes
0
answers
105
views
Why is there no DNS mechanism for requiring HTTPS on a domain?
Typically, HTTPS redirection happens like this:
The user clicks or types an HTTP link, e.g. http://example.com/url.
If the browser has seen a Permanent (301) redirect to HTTPS for that exact URL, it ...
- 132
0
votes
2
answers
3k
views
Will 1.1.1.1 hide my traffic from my landlord's router?
I've read different articles about https://1.1.1.1/ and am confused since they conflict. A couple examples:
effectively making your traffic invisible to snoopers on your local network but not ...
- 315
0
votes
1
answer
1k
views
How do I redirect HTTPS site to another HTTPS site over LAN using a linux? [closed]
Is there a tool, or a command for linux that can make possible to redirect HTTPS site to another HTTPS site on LAN? i'm using Kali Linux, and all the tools and commands that i found was to redirect ...
- 1
0
votes
0
answers
729
views
MITMPROXY on router
I am familiar with MITM LAN attacks using dnsspoof and arpspoof to read client data. Instead of spoofing the DNS and impersonating the router on my physical machine, I want to set up a MITM LAN ...
2
votes
1
answer
2k
views
Why would hackers attack a DNS server with a DoS?
I wake up this morning to a rebooted server. The DNS server was running at over 100%. After a little bit of work, I got fail2ban in place to block all of those requests.
The requests themselves are ...
- 872
25
votes
5
answers
8k
views
Why is DNS-over-HTTPS such a big security nightmare compared to DNS-over-TLS?
I've heard the argument against DNS-over-HTTPS that it is supposed to be a security nightmare for network defenders because it enables encrypted DNS over port 443, compared to DNS-over-TLS which goes ...
- 355
0
votes
1
answer
257
views
dig returns different MX record, can anyone explain why?
I have a domain lets call it example.com when I do: dig example.com MX +short, it returns:
10 mx1.[Internet_Service_Provider_Domain]
so, I decided to trace the DNS to check if there any possible DNS ...
- 39
1
vote
1
answer
161
views
How do DoT and DoH facilitate fingerprinting by resolver operators?
https://dnscrypt.info/faq/ states for both DNS over HTTPS and DNS over TLS that it
Provides more information than regular DNS to resolver operators in order to fingerprint clients
How so?
- 135
3
votes
1
answer
537
views
DNS 3rd party risks
I'd like to know what are the risks having a subdomain managed by third party. For example, I manage my own DNS servers to serve mydomain.example which provide some internal and public content. If I ...
- 31
0
votes
1
answer
255
views
DKIM and CNAME or DNAME
As far as I understand, there should be no problems with using CNAME or DNAME records in connection with DKIM. That is, while the DKIM record for verifiying a mail from someone@example.com wants to be ...
- 1,098
0
votes
1
answer
813
views
How does openvpn work for only certain servers?
I got a *.openvpn from work and I monitored the traffic on wireshark.
On my normal vpn every traffic is routed via the vpn (as expected).
But with this work vpn only the traffic that uses the work ...
- 103
2
votes
0
answers
534
views
HTML Injection to blind SSRF testing retrieves only DNS Query
I recently came across an application that was vulnerable to HTML injection on the invite function. When I insert <img src="image.jpg"> the image got rendered on the mail I received.
I ...
- 45
3
votes
1
answer
2k
views
Is there a security vulnerability in setting a public DNS entry to a private IP Address?
I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
- 133
12
votes
1
answer
3k
views
Hijacking stale DNS entry to point to your own website
Context and system configuration:
AWS EC2 instance with a public IP address
AWS Route53-managed DNS with a somesubdomain.somedomain.io pointing to the above IP address
Above AWS EC2 instance was not ...
- 662
1
vote
2
answers
4k
views
Does it make sense to use CloudFlare's DNS in addition to NordVPN?
Starting at the Computer level, NordVPN gets installed. But according to the experts who know a lot better, a VPN isn't good enough.
So going to the router's IPv4 network settings, the default DNS is ...
- 13
3
votes
2
answers
1k
views
Problems with using a non-reserved top-level domain for local DNS resolution
A network administrator at my organization (let's call him "Bill") wants to configure an internal DNS with the live top-level domain (TLD) .int for internal IP address resolution (for Active ...
- 175
0
votes
1
answer
547
views
Why can I still receive email at my old domain after someone else bought it?
My domain expired years ago and was registered by another party.
I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes.
Now if someone buys ...
- 3
0
votes
0
answers
77
views
Is there any reason not to enable DNSSEC? [duplicate]
Google Domains' DNS management has a link that says Enable DNSSEC. And, as I understand it, this prevents spoofing of DNS responses. And, that sounds great!
So, why wouldn't I want to enable DNSSEC?
...
- 711
-2
votes
1
answer
100
views
How did these entries get into the Public DNS? [closed]
try ping these (and everything in between)
021111111111
021555555555
What are they?
- 859
1
vote
0
answers
193
views
Why are DNS prefetch requests sent in clear text with DNS over HTTPS enabled?
I am trying to understand how DNS-over-HTTPS (DoH) works in both Chrome and Firefox browsers.
To do so, I have enabled DoH on each browser and set the DNS provider to Cloudflare DNS servers (1.1.1.1 ...
- 11
2
votes
2
answers
123
views
Impersonation of TLS host with own wlan network
Problem: I have a local machine (IoT, lets call it MCC) which connects via SSL to a website (mcc.com) to get some JSON data. I would like to send modified JSON from my own server.
Idea: Setup a local ...
- 21
3
votes
2
answers
170
views
How to find out where CNAME had resolved to in the past?
Are there any tools for this?
I am doing some research into pentesting and subdomain takeovers with cloud providers like AWS and Azure. I have a list of subdomains (A records) that could be used for ...
- 31
2
votes
1
answer
214
views
Seems my CNAMEs got "curled". Somebody please explain this to me
According to my CloudFlare firewall logs, somebody went through each of my subdomains. My website is not advertised, it doesn't even show on Google unless typing the exact domain name into it. I think ...
- 29
0
votes
0
answers
406
views
Monitor HTTPS URL logging of a specific device of a Network
Goal
The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store.
Ex. Alexa, Chromecast, and maybe ...
- 125
32
votes
6
answers
4k
views
Is it possible for a name server provider to hijack MX records?
Let’s say:
We buy a domain from http://cheap-unsecure-domains.example.
Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service.
We set some MX ...
- 423
0
votes
1
answer
147
views
Spoofed DNS answers ignored by target machine applications
Attacker: Arch Linux
Target: Windows 10
Scenario
The attackers launches an ARP spoof attack to redirect all target traffic to the attacker. (This works)
The target sends DNS queries for domain name ...
- 13
2
votes
1
answer
682
views
How dangerous is it to open my DNS server to the world?
I'm using pihole as my DNS on the LAN but I'm trying to use it as my "global" DNS server wherever I am on the planet.
One solution is to use a VPN on my LAN and pihole being set as the default DNS ...
- 161
1
vote
2
answers
199
views
What stops a malicious DNS subdomain provider from impersonating my website?
First, some background: The DNS-01 verification method of Let's Encrypt requires you to add a TXT record to a special subdomain your domain name to prove your identity. With ACMEv2, this can allow you ...
- 175
2
votes
2
answers
160
views
Private Authoritive Recursive DNS
In the bind9 config (Centos8) there is a note saying
If you are building an AUTHORITATIVE DNS server, do NOT enable
recursion.
I would like to know why and if this is still a concern if the DNS ...
- 151
3
votes
1
answer
684
views
Does Unbound re-use TLS connections for DoT forwarding?
Unbound has the option to use DNS over TLS as an upstream (through the forward-tls-upstream setting).
CludFlare's 1.1.1.1 service offers this; also through TOR.
My question is whether
Unbound will ...
- 131