Main menu:

Search DNS Fool

Categories

Archive

Archive for 'Articles'

Looking Back on Kaminsky’s DNS Bug

A lot has happened in the world of DNS since July 8th.  Of course, that is when Dan Kaminsky revealed his now famous DNS bug and the patching panic began.  Since that time there have been many explanations of the bug, along with much discussion about also how the bug can be exploited and why [...]

More Free DNS Utilities

Bite my Bytes has collected a list of free DNS reporting utilities.

Expanding the DNS Universe

ICANN is set to vote on whether or not to open up the top-level namespace to individuals and companies:
“It’s a massive increase in the geography of the real estate of the internet.”
For example, the new policy would allow NBC to purchase the .nbc top-level domain and use it for things such as seinfeld.nbc, friends.nbc, and [...]

DNS Troubleshooting Utilities

The Royal Pingdom blog has put together a list of “14 useful and FREE online tools for DNS and network troubleshooting“.
My favorites are IntoDNS and CheckDNS, since they provide a lot of information in their reports.

DNS Spoofing with Ettercap

IronGeek demonstrates the dns_spoof plugin for Ettercap and shows how easily domain names can be redirected by an attacker on your network.
In this video I’ll show how to use the Ettercap plugin dns_spoof to set up DNS spoofing on the local area network. This Ettercap plugin is only one potential way to pull off DNS [...]

DNS SRV Record Tutorial

Anders Brownworth has written a nice tutorial for configuring SRV records. SRV records are becoming more popular, especially for use with SIP, so it’s good to see someone writing about them.
Anders has also written an SRV record builder for use with djbdns’s tinydns server. tinydns has a generic record format that can [...]

Social Engineering DNS

Two teenage “hackers” take control of comcast.net:
The hackers say the attack began Tuesday, when the pair used a combination of social engineering and a technical hack to get into Comcast’s domain management console at Network Solutions. They declined to detail their technique, but said it relied on a flaw at the Virginia-based domain registrar.
And
The hackers [...]