Collaborate Disseminate
I’m using duckdns as my free ddns provider. The domain is in the form domain.duckdns.org.
I believe it would be technically possible for them to copy the files my server hosts, redirect "my" domain to their own server and create … Continue reading Can DDNS provider perform a MITM attack?
Microsoft and GOV.UK recommend creating a record like the following on any domain that doesn’t send email.
TXT *._domainkey v=DKIM1;p=
As I understand it, the purpose is to explicitly fail DKIM, rather than leaving open the possibil… Continue reading What’s the purpose of an invalid wildcard DKIM record?
I guess I have understood the basic concepts of DoT and DoH and how they prevent providers (ISPs) from analyzing my DNS queries and creating profiles. However, I have got a question which is so basic that it is probably quite stupid, but I… Continue reading What exactly is the sense of DoT with respect to privacy, given that my provider can log my destination IP addresses?
Akamai Technologies revealed three research reports at the RSA Conference 2022, focusing on three of the most critical areas of web security: ransomware, web applications and APIs, and DNS traffic. Analyzing trillions of data points across its multiple… Continue reading Top three most critical areas of web security
EfficientIP has announced the findings of its eighth annual 2022 Global DNS Threat Report, conducted by IDC, which reveals the damaging impact Domain Name System (DNS) attacks have had on global organizations’ operations over the past 12 months. The re… Continue reading The costs and damages of DNS attacks
I am building an application in ASP.NET core MVC which allow users to enter a domain name and click submit >> then the application should check if DNSSEC is setup for a domain >> update the database accordingly.
So is there a …. Continue reading Power Shell or .Net library to check if DNSSEC is setup for a domain [closed]
Lets say the target company says only *.target.com is in scope.
If i’m doing hosntnames recon, then its easy to stay in scope as only subdomains of target.com is in scope e.g dev.target.com, admin.target.com.
But i have heard pentesters ta… Continue reading How is IP reconaissance different from host names reconaissance?
Do Public DNS servers log our DNS queries? I started running my own AdGuard Home in the cloud using Oracle Compute Instance. In AdGuard Home’s dashboard, it logs my DNS queries.
I was wondering if Public DNS servers such as Cloudflare, Go… Continue reading Do Public DNS servers log our DNS queries?
If I have DNS over HTTPS and DNS over TLS activated simultaneously (router has DoT activated and smartphone browser has DoH activated, so I see on https://1.1.1.1/help DoH: yes and DoT: yes), which one is used?
Continue reading What happens if both DoH and DoT are enabled?
I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address?
My scenario: I discovered 2 DNS servers running… Continue reading DNS Enumeration by IP Address