quarta-feira, 31 de maio de 2023

DNSSEC, From An End-User Perspective, Part 3

In the first post of this DNSSEC series, I have shown the problem (DNS vulnerabilities), and in the second post, the "solution." In this third post, I am going to analyze DNSSEC. Can DNSSEC protect the users against all of the attacks? Or just part of them? What about corner cases?

The following list are the attack types from the first post, where DNSSEC can protect the users:

  • DNS cache poisoning the DNS server, "Da Old way"
  • DNS cache poisoning, "Da Kaminsky way"
  • ISP hijack, for advertisement or spying purposes
  • Captive portals
  • Pentester hijacks DNS to test application via active man-in-the-middle
  • Malicious attacker hijacks DNS via active MITM

The following list are the attack types from the first post, where DNSSEC cannot protect the users:

  • Rogue DNS server set via malware
  • Having access to the DNS admin panel and rewriting the IP
  • ISP hijack, for advertisement or spying purposes
  • Captive portals
  • Pentester hijacks DNS to test application via active man-in-the-middle
  • Malicious attacker hijacks DNS via active MITM

If you are a reader who thinks while reading, you might say "What the hell? Am I protected or not???". The problem is that it depends… In the case where the attacker is between you and your DNS server, the attacker can impersonate the DNS server, downgrade it to a non DNSSEC aware one, and send responses without DNSSEC information.

Now, how can I protect against all of these attacks? Answer is "simple":
  1. Configure your own DNSSEC aware server on your localhost, and use that as a resolver. This is pretty easy, even I was able to do it using tutorials.
  2. Don't let malware run on your system! ;-)
  3. Use at least two-factor authentication for admin access of your DNS admin panel.
  4. Use a registry lock (details in part 1).
  5. Use a DNSSEC aware OS.
  6. Use DNSSEC protected websites.
  7. There is a need for an API or something, where the client can enforce DNSSEC protected answers. In case the answer is not protected with DNSSEC, the connection can not be established.

Now some random facts, thoughts, solutions around DNSSEC:

That's all folks, happy DNSSEC configuring ;-)

Note from David:
Huh, I have just accidentally deleted this whole post from Z, but then I got it back from my browsing cache. Big up to Nir Sofer for his ChromeCacheView tool! Saved my ass from kickin'! :D

More information


  1. Beginner Hacker Tools
  2. Pentest Tools Find Subdomains
  3. Pentest Tools For Mac
  4. Hacking Tools Windows 10
  5. Hacking Tools Online
  6. Hack Website Online Tool
  7. Pentest Tools Online
  8. What Are Hacking Tools
  9. Hacker Tools Software
  10. Hack Tools Pc
  11. Pentest Tools Framework
  12. Pentest Tools
  13. Game Hacking
  14. Pentest Tools For Ubuntu
  15. Hacking Tools For Windows 7
  16. Hack Tools 2019
  17. Pentest Tools Windows
  18. Game Hacking
  19. Pentest Tools Android
  20. Pentest Tools
  21. Free Pentest Tools For Windows
  22. Hack Tools Download
  23. Pentest Tools Website Vulnerability
  24. Hack Tools For Pc
  25. Pentest Tools Kali Linux
  26. Pentest Tools Url Fuzzer
  27. Bluetooth Hacking Tools Kali
  28. Hack Apps
  29. Best Pentesting Tools 2018
  30. Kik Hack Tools
  31. Pentest Tools Kali Linux
  32. Hacker Tools For Ios
  33. Pentest Tools Apk
  34. How To Hack
  35. Pentest Tools Subdomain
  36. Pentest Tools Framework
  37. Hacking Tools For Windows Free Download
  38. Game Hacking
  39. Termux Hacking Tools 2019
  40. Hacker Tool Kit
  41. Hacker Tools Github
  42. Hacking Tools Pc
  43. Pentest Tools Download
  44. Computer Hacker
  45. Pentest Automation Tools
  46. Hack Tools
  47. Hacking Tools For Windows 7
  48. Hack Tools Pc
  49. Hacker Tools Online
  50. Pentest Tools Free
  51. Hack Tools
  52. Pentest Tools Framework
  53. Hack And Tools
  54. Pentest Tools Website Vulnerability
  55. Android Hack Tools Github
  56. What Is Hacking Tools
  57. Top Pentest Tools
  58. Hacking Tools Software
  59. Hack Tools Download
  60. Hack Tool Apk
  61. Hacker Tools Free Download
  62. Hacking Tools Mac
  63. Hacking Tools For Mac
  64. New Hack Tools
  65. Hacking Tools Hardware
  66. Hack Tools
  67. Nsa Hacker Tools
  68. Hacking Tools Github
  69. Free Pentest Tools For Windows
  70. Hacker Tools List
  71. Nsa Hacker Tools
  72. Growth Hacker Tools
  73. Beginner Hacker Tools
  74. Hacker
  75. Hacking Tools For Windows 7
  76. How To Hack
  77. Hack Tools Online
  78. Install Pentest Tools Ubuntu
  79. Nsa Hacker Tools
  80. Game Hacking
  81. Hacking Tools Free Download
  82. Pentest Tools Subdomain
  83. Pentest Tools Tcp Port Scanner
  84. What Are Hacking Tools
  85. Hacking Tools Windows 10
  86. Kik Hack Tools
  87. Github Hacking Tools
  88. Hacker Tool Kit
  89. Hacking Tools For Mac
  90. Growth Hacker Tools
  91. Github Hacking Tools
  92. How To Hack
  93. World No 1 Hacker Software
  94. Hack Apps
  95. Hacks And Tools
  96. Nsa Hacker Tools
  97. Best Hacking Tools 2019
  98. Hacking Tools
  99. Android Hack Tools Github
  100. Android Hack Tools Github
  101. Pentest Tools Framework
  102. Hack Tools Pc
  103. Easy Hack Tools
  104. Tools Used For Hacking
  105. Hack Tools Mac
  106. Pentest Tools Subdomain
  107. Android Hack Tools Github
  108. Hack Tool Apk
  109. Hacker Tools Windows
  110. Hack Rom Tools
  111. Top Pentest Tools
  112. Easy Hack Tools
  113. Tools Used For Hacking
  114. Tools For Hacker
  115. Hacking Tools Hardware
  116. Pentest Tools Kali Linux
  117. Tools 4 Hack
  118. Bluetooth Hacking Tools Kali
  119. Hacking Tools For Windows Free Download
  120. Pentest Tools List
  121. Top Pentest Tools
  122. Hacker Tools 2020
  123. Hacker Tools Free
  124. Hack Tools For Windows
  125. How To Make Hacking Tools
  126. Hacking Tools For Windows
  127. What Is Hacking Tools
  128. Hacker Tools List
  129. Pentest Tools Online
  130. Kik Hack Tools
  131. Pentest Tools Alternative
  132. Hacking Tools Windows
  133. Hacker Techniques Tools And Incident Handling
  134. Hak5 Tools
  135. Hack Tools Github
  136. Pentest Tools Url Fuzzer
  137. Wifi Hacker Tools For Windows
  138. Hacking Tools 2020
  139. Hacking Tools Download
  140. Hacker Tools 2019
  141. Pentest Tools Find Subdomains
  142. Hak5 Tools
  143. Hacking Tools 2019
  144. Pentest Tools Online
  145. Pentest Tools Apk
  146. Hacker Tools 2019
  147. Pentest Tools Online
  148. Pentest Tools Download
  149. Hacking Tools For Games
  150. Underground Hacker Sites
  151. Hacker Tools For Ios
  152. Pentest Tools
  153. Hacker Tools 2020
  154. Pentest Tools For Windows
  155. Pentest Reporting Tools
  156. Usb Pentest Tools
  157. Pentest Tools Port Scanner
  158. Pentest Tools Android
  159. Hacker Tools Apk Download
  160. How To Make Hacking Tools
  161. Hacker Tools Online
  162. Top Pentest Tools
  163. Growth Hacker Tools
  164. Hack Tools
  165. Hacker Tools Free
  166. Pentest Tools Find Subdomains

Sem comentários: