Collaborate Disseminate
A recent analysis published by Infoblox reveals a sophisticated phishing operation, dubbed Morphing Meerkat, actively exploiting DNS vulnerabilities… Continue reading New Morphing Meerkat Phishing Kit Exploits DNS to Spoof 100+ Brands
The UK National Cyber Security Centre (NCSC) has released security guidance for domain registrars and operators of Domain Name System (DNS) services. “DNS registrars have an important role to help counter domain abuses throughout their lifecycle,… Continue reading UK NCSC offers security guidance for domain and DNS registrars
In our organization we have 2 Active Directory DCs which also uses as DNS servers for all our infrastructure (user PCs, domain and non-domain servers, wi-fi clients, vpn users). I have doubts about the correctness of this approach. For som… Continue reading Separate DNS servers for non-domian hosts and users
I’m trying to block YouTube entirely from my network. I’m in full control of routing and DNS (Linux: ipfilter/dnsmasq). The issue I am having is that I am unable to block YouTube without blocking Google services (like Docs, Gmail) as colla… Continue reading Blocking YouTube without blocking other Google services [migrated]
I want to pivot with DNScat2, but I can’t find the "listen" command. I try to use the -h flag and I get an error. Please help.
I want to pivot with DNScat2, but I can’t find the "listen" command. I try to use the -h flag and I get an error. Please help.
Traditional monitoring tools reveal only traffic from the Chrome process, leaving security teams uncertain about which extension is responsible for a suspicious DNS query. ExtensionHound solves this by analyzing Chrome’s internal network state and link… Continue reading ExtensionHound: Open-source tool for Chrome extension DNS forensics
Nulled.to and Cracked.to, major hacking forums, appear seized by the FBI as DNS records point to FBI servers.… Continue reading FBI Seizes Leading Hacking Forums Cracked.to and Nulled.to
I just switched my whole home network (about 100 devices, many IoT) to NextDNS.io. Upon checking the logs I noticed some requests recurring every few minutes to:
www.goooooooooooooooooooooooooooooooooooooooooooooooooooooooooogle.com
I did … Continue reading What is this suspicious recurring DNS lookup to gooo…ooooogle.com in my DNS logs?
I’m looking into ways to network wide block specific TLDs such as ZIP, XYZ, MOV. However I prefer to not setup a whole custom DNS specifically for this purpose. I so far did not find a solution yet. A command line option instead of through… Continue reading Is it possible to block entire TLDs on Ubiquity UniFi devices without a custom DNS?