Re: testing dns servers

nslookup, txdns,dig, host, bile suites, etc.

Checkout Metasploit and the milw0rm site too.

http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html

-p1g

On 4/15/07, Zhihao <zhihao@xxxxxxx> wrote:
Hi,

How would you guys test a dns server for holes?

Here are some that i thought of..

1. Make sure it does not allow recursive queries.
2. Make sure it does not allow zone transfers from unauthorized hosts.
3. Make sure it is not vulnerable to dns cache poisoning.

Anything other vectors we could look at?

Cheers.


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------




--
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

Relevant Pages

  • Res: testing dns servers
    ... to hide the version of your DNS its a good one. ... Are you using SPI, Watchfire or WhiteHat? ... Consider getting clear vision with Cenzic ...
    (Pen-Test)
  • Re: Web Site Mystery
    ... host our own web site at this location. ... So in our DNS setup, there is a pointer to the ip address of the ... Run an ipconfig /all on your server and you'll see the ... www.europacrown.com don't work from our corporate network. ...
    (microsoft.public.windows.server.general)
  • Re: Underscore in IIS 6 Host Header definition
    ... The RFC that you referenced does not define the standard for the DNS ... An underscore is not valid in a host. ...
    (microsoft.public.inetserver.iis)
  • Re: Retardedness
    ... have not written any reverse DNS code. ... Begins an asynchronous request for IPHostEntry ... information about the specified DNS host name. ... GetHostAddresses: Returns the Internet Protocol addresses for ...
    (alt.os.windows-xp)
  • Re: Unable to sentd email to certain domains...
    ... Think of reverse DNS this way. ... When you ping a host by name ... they often don't have a reverse DNS set up. ... provider should be able to set this up no problem. ...
    (microsoft.public.exchange.admin)