Questions tagged [dns]

The Domain Name System (DNS) translates Internet domain and host names to IP addresses.

Filter by
Sorted by
Tagged with
0
votes
1answer
246 views

third party DNS over ISP DNS - privacy issue

How does using third party DNS like cloudfare 1.1.1.1 DNS helps to protect privacy when ultimately ALL traffics goes through ISP? ISP is the middle man between me and the internet. Since DNS is in ...
1
vote
1answer
130 views

DNSSEC - does the domain owner owns a key?

The purpose of DNSSEC is to prevent some attacks like cache poisoning so a client can be sure that the answer it gets from a recursive DNS server are correct (the IP is the correct IP). The root DNS ...
0
votes
1answer
1k views

Vulnerabilities of DNS when utilized on a TCP port

There was some specific cyber security challenge (Cyber Cube 2018, GE). In one of the tasks, objective was to gain the access to some specific file that server included. After successfully solving ...
0
votes
1answer
3k views

dnsspoof doesn't spoof DNS request with IP-address of local machine

I want to spoof all DNS requests with the IP address of my local machine. However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host. I know I can ...
6
votes
2answers
2k views

Why is my Windows desktop using a DNS Server on localhost?

I recently inherited a corporate network and one of the devices kept having errors connecting to mapped network drives with errors pertaining to the server time being different than the computer's ...
0
votes
1answer
890 views

How does Domain Fronting work in practice

While reading about Domain Fronting (and Google and Amazon's decision to ban it), I came across this blog where the author has identified domains that allow fronting. From the blog, doing something ...
0
votes
1answer
234 views

Is there any advantage to using encrypted DNS on a VPN server

I have a personal OpenVPN server. I am worried that the fact the DNS resolution coming out of the server isn't encrypted, since I am the only one that uses the server at the moment, attribution isn't ...
2
votes
2answers
6k views

Connecting to my VPN via IP or domain name?

Background: So I use a private VPS to host my own VPN, rather than pay/trust another company to host it for me. I am an intermittent traveller so it is cheaper for me to spin up or down my server as ...
5
votes
1answer
360 views

How DNS hijacking was myetherwallet.com fault even though AWS DNS server was hijacked yesterday

I have been reading on how myetherwallet was hacked a day ago because Amazons domain service was compromised, as mentioned here, https://www.reddit.com/r/ethereum/comments/8ek86t/...
2
votes
0answers
1k views

dnsspoof and bettercap not dns-spoofing

I want to dns spoof my own phone, because I feel like it would be a cool experiment to do. It's not working (damn phone keeps connecting to the internet), and I would really appreciate any suggestions ...
8
votes
1answer
462 views

How to obtain privacy and authenticity with DNS?

I use pfSense (Unbound) as my local resolver. Historically I've pointed it at root recursive resolution, because I perceived my main threat as trustworthiness and recency of data (poisoned/invalid DNS)...
3
votes
1answer
490 views

What information does a private DNS prevent my ISP from seeing? [duplicate]

Forgive me for the simple question, I have very little knowledge about networks. The new DNS service from Cloudflare claims to offer a "more private" connection but I don't understand if/how it can ...
4
votes
1answer
236 views

Are browsers still vulnerable to IDN homograph attacks?

Is it not possible for Chrome and Firefox to protect against this > https://www.аррӏе.com/ Navigating to that above (fake) apple website using Firefox 59.0.2 doesn't actually take me to the apple ...
2
votes
1answer
247 views

DNS flood vs DNS Amplification attack: How is one considered a network/transport layer attack and the other a application layer attack?

I am reading a survey on DDoS attacks and they describe how these attacks can be classified by either Network/Transport level attacks and Application level attacks. In their examples, they classify ...
2
votes
0answers
258 views

Mitigating reverse DNS lookup danger / exploitation

I have read several posts indicating that reverse dns lookup cannot be trusted, as someone can spoof DNS -- so when a rule is made that allows traffic through dns, its possible to exploit. However, ...
2
votes
1answer
253 views

What are the potential risks of performing DNS queries on unknown domains?

When investigating malicious domains that are used for phishing, malware, etc, you often have to issue DNS queries for these domains. For example: dig @1.1.1.1 example.com The potential risks of ...
1
vote
0answers
186 views

Why ever “trust” Nmap's reverse lookup for system hostname when doing host discovery?

Quick question. I was scanning a lab network with Nmap just doing host discovery to see what hosts were out there. I got a list of hosts, ips, hostnames, ports open, services, etc. Upon further ...
-3
votes
1answer
160 views

Is YouTube DNS actually revealing the full domain?

I have heard that YouTube, including their iPhone app, is encrypted by using TLS (HTTPS). So that means the DNS packet should only reveal the base domain, like youtube.com. However, while testing ...
1
vote
1answer
45 views

Interconnected DNS Information [closed]

So, one of the methods to verify if a domain is legitimate or not is to check out it's DNS records and their interconnection. The ones I could find are. NS and PTR record A and AAAA pointing to ...
1
vote
2answers
540 views

What can I do to prevent BGP hijacking as an admin of some OVH's VPS?

I am an operator of some public service which is run on some OVH's VPS. Recently I was contacted by an anonymous contact, who suggested that the service was BGP-hijacked and some sensitive info of ...
1
vote
1answer
142 views

Disabling external DNS lookups - is this really so beneficial for security?

I have recently started working for a company which disables external DNS resolution from the machines inside the network by not adding external forwarders to the internal DNS servers - the reasoning ...
-4
votes
1answer
487 views

How does resolv.conf work? [closed]

Can someone try explaining (in simple terms) how Wi-Fi routers push nameservers and routes to my resolv.conf? I've noticed it gets changed automatically as I move between different Wi-Fi networks. I ...
139
votes
3answers
26k views

Did I just get DNS Hijacked?

I went online on my Macbook today and noticed my iTunes complaining that it couldn't connect to Apple, I tried logging out and in of my account but weirdly it said it couldn't log in; I didn't think ...
2
votes
1answer
276 views

How many times does a DNS server need to sign?

I have a question about DNSSEC and how many times a DNS server must sign or in other words, how many signatures are there in a day. I know that DNSSEC builds on a chain of trust starting at the root ...
1
vote
1answer
561 views

Can I use BIND in place of DNSCrypt? [closed]

I was using DNSCrypt on my personal computer (linux). I uninstalled it, and now I'm getting errors reinstalling. I believe development on DNSCrypt was being abandoned anyway, because Cisco/OpenDNS ...
18
votes
1answer
2k views

Why don't browsers check CAA records to help ensure a certificate is valid?

If I understand correctly, Certification Authority Authorization DNS records are used to specify which certificate authorities are allowed to issue certificates for a given domain. If that record ...
7
votes
2answers
4k views

What is the best way of finding subdomains of a domain?

I need to find most subdomains of a domain. I know there are many options. I've tried many available in Kali Linux: dnsmap dnsenum dnsrecon dnswalk fierce urlcrazy Most of them only find 2 or 3 ...
2
votes
2answers
320 views

do SRV records make a system more vulnerable or expose too much

We are all pretty comfortable with the fact that if ports 80 and 443 are open that these are for http even though some companies block 22 forcing people to repurpose 443 for ssh. So, those instances ...
2
votes
1answer
475 views

Does Chrome respect the X-DNS-Prefetch-Control header?

If my web page returns X-DNS-Prefetch-Control=off, will Chrome do DNS prefetch for links like these?: <link rel="dns-prefetch" href="http://www.spreadfirefox.com/"> I know Firefox and Chromium ...
0
votes
1answer
102 views

Establishinig TLS session with HTTP server after DNS-over-TLS

I just learned about DNS-over-TLS from IETF. I need clarification in some points to get the whole picture. Assume there is a client want to connect to a TLS server and use DNS-over-TLS as well. The ...
2
votes
1answer
107 views

Is it safe to post the output of Linux dig (DNS) commands?

I need help debugging/troubleshooting a DNS/DKIM issue over on ServerFault, but it looks like I need to paste the results of running: dig my-dns-record.example.com CNAME ...where my-dns-record....
2
votes
2answers
186 views

Active Directory DNS server security misconfiguration or an acceptable practice?

I work for a large Eastern European bank as a programmer. Recently, I was setting up a documentation website for my team. We came up with the host name, and now all we needed was to pick the best ...
0
votes
2answers
292 views

Which SPF quantifier applies when an SPF include is used?

An SPF record has several tags of which one can be the include tag, and the SPF record ends with a quantifier like +, ?, ~ or -. When an include tag is used, the included SPF record has it’s own SPF ...
1
vote
2answers
4k views

Do SPF records apply to all subdomains?

Does a SPF record apply only on the domain it’s setup for or also for all it’s subdomains? For example an SPF record that is configured for the domain example.com will set the policy for mails ending ...
0
votes
2answers
292 views

Is DANE the DNS-variant of HTTP Public Key Pinning (HPKP)?

I’m trying to understand DANE and TLSA records more accurately. Is it fair to call DANE the DNS-variant of (or at least a very similar technique to) HTTP Public Key Pinning (HPKP)? Because with HPKP ...
1
vote
1answer
61 views

Does flushing DNS help with your anonymity?

Some had said that flushing DNS could help you stay more anonymous but is this claim legit? I know for sure that webpages can see the DNS servers you're using but could they see your DNS cache? Where ...
1
vote
1answer
263 views

Server get flooded by Avast Secure DNS

My server is getting flooded by Avast Secure DNS. This was generating high I/O while writing lots of entries in daemon.log and syslog files. Thank to fail2ban, I was able to ban those IP and get the ...
17
votes
1answer
2k views

Should OS information be in DNS?

We are having an internal discussion about system naming conventions and there is a disagreement about including the type of OS a system is running in the DNS host record. One suggestion was to ...
1
vote
1answer
75 views

Is OSX/MaMi a real malware or a simple filtering software?

Recently a lot of communications spread starting from this analysis: OSX/MaMi analysis When I read this analysis, I found that 2 DNS servers are defined as default ones for the IP configuration: 82....
4
votes
1answer
2k views

ARP spoofing with Scapy. How does Scapy reroute traffic?

Background: I understand that in order to ARP spoof a victim in a network using Scapy, we need to send ARP reply packets to the victim and the gateway router with the correct destination and Source ...
4
votes
2answers
2k views

Detecting C2 traffic over DNS?

Let's assume I have a large enterprise network (thousands of nodes) and somewhere on that network there is malware communicating over DNS for C2. Let's assume the requests are designed such that the ...
2
votes
1answer
160 views

DNS spoofing+firewall port hijack/redirect to capture HTTPS requests without getting “certificate untrusted error” on the client browser [duplicate]

If i could setup a DNS server that responds with my server's IP for a certain domain, along with redirecting https and all DNS queries requests to my local https site and my local DNS server ...
4
votes
2answers
3k views

How to hide dns requests from ISP?

I am using google image a lot. I discovered through Wireshark, any images under preview mode of google images search result actually expose the dns where that image was hosted from. For example, my ...
2
votes
2answers
438 views

Protecting yourself from DNS spoof

How does one protect themself from a DNS compromised site, which also has had their SSL private key stolen? Short of monitoring which IP the packets are being sent to. Edit: Or even without the ...
-2
votes
1answer
158 views

DNS Request makes Google Image Unsafe to Use

I always thought the images from Google image search were under the domain of Google URLs. As long as you don’t click the image to visit the original site that hosts that picture, you were with ...
1
vote
4answers
772 views

Difference between whois of a hostname and an IP [closed]

I was reading through No Starch's Metasploit book when I came across a segment which showed the results of running the 'whois' command on a hostname and then on it's corresponding IP only to yield ...
0
votes
1answer
86 views

Where or how can I get list of domain dependencies of top 100 popular sites? [closed]

For example google.com depends on ssl.gstatic.com, lh3.googleusercontent.com, fonts.gstatic.com. I need this list for Proxy settings
3
votes
0answers
35 views

Can some combinations of DNS-entries be security vulnerabilities?

Lets assume you have these DNS-entries for domain.tld: host = domain.tld type = SOA mname = dns.otherdomain.tld rname = hostmaster.otherdomain.tld host = domain.tld type = NS target = ns1....
0
votes
2answers
528 views

If ssl certs authenticate the servers ip address, how come I can't find a whitelisted ip address in any secure certs or am i looking in wrong place?

UPDATE This question is illogical. Https does not authenticate the IP address I was wrong. I guess my question (should have been) how can I verify the server's IP from the cert? I thought that was an ...
3
votes
1answer
2k views

How does CleanBrowsing DNS servers make 'Youtube, Google and Bing forced to SafeMode'?

Quote from Activating CleanBrowsing Activating CleanBrowsing is pretty simple and only takes 5 minutes. We do our work via DNS, so you have to switch your DNS servers to go through our Network ...