Collaborate Disseminate
If you connect to a VPN network on a Windows machine for instance,
smart multi-homed name resolution may lead to DNS leakage. Since
requests are sent out to all network adapters at the same time, all
configured DNS servers receive the req… Continue reading Does smart multi-homed name resolution really lead to DNS leak?
I am reading up on secure DNS (DoH, DoT) and trying to identify its differences. Currently, I am on https://www.cloudflare.com/learning/dns/dns-over-tls/ page.
Is there for example some non-negligible performance hit between those two?
I… Continue reading Secure DNS (DoH, DoT) differences, performance, comparison
I was trying to solve some recon badge problem from pentesterlab.com
But when I tried to transfer zone (using dig axfr), the website (hackycorp.com, z.hackycorp.com) says connection failed or time out.
And if I scan it with nmap, port 53 i… Continue reading How to zone transfer – (Pentester lab – problem in recon badge – port 53 filtered ) [closed]
Can’t we simply send the shared secret key along with AXFR query?
A hacker can easily use sniffed TSIG record to authenticate himself. Then how it’s called SECURED zone transfer?
Continue reading Need of Transaction SIGnature (TSIG) record
I read about Domain Fronting technique, it bypasses network security filters but requires a relatively complex configuration (having evil.com pointing to a.cdn.net, and good.com pointing to b.cdn.net, then we send a request to good.com whi… Continue reading Bypass network security filters with CDN
I was using httpx on subdomains to see if they are live, but I was getting 503 Status code on a large number of domains (like in the image).
One inference that is possible is that the site it behind Akamai WAF,
but does this mean somethin… Continue reading Is there anything we can deduce from 503 status code from a WAF?
I know there are many different types of DNS records out there, and you can see most of them with a simple query tool like dig. But now I’m wondering which types you can’t see from a scan like that. Does anybody know of any types like this… Continue reading What DNS records can you not see from dig? [closed]
I manage a Microsoft environment and I use FortiClient EMS for our endpoint security. That system is logging blocked requests to https://h.parrable.com. As best I can tell, this is not a malicious site per se but appears to be a service be… Continue reading How can I monitor which page in the web browser is making a DNS request?
We have been targeted by DNS DDOS attacks. We have now migrated to AWS Route53 as these DNS servers are more resilient.
Is using AWS Route 53 enough to have basic DDOS protection? Or is it necessary to combine it with other AWS products li… Continue reading Is using route 53 from AWS sufficient for DDOS protection on DNS level, or do you need to combine it with other AWS products
If you want to get cloud migration right, you must deal with an inconvenient truth: Cloud or hybrid cloud environments lower the drawbridge between your data center and the internet, and that creates opportunity as well as security risk. Many enterpris… Continue reading How to get cloud migration right