Res: testing dns servers

I think, to hide the version of your DNS its a good one.

Marcos Aurelio Rodrigues (d319r4t1433)
Pueri quod semper amat Dei

----- Mensagem original ----
De: Zhihao <zhihao@xxxxxxx>
Para: pen-test@xxxxxxxxxxxxxxxxx
Enviadas: Domingo, 15 de Abril de 2007 3:49:37
Assunto: testing dns servers

Hi,

How would you guys test a dns server for holes?

Here are some that i thought of..

1. Make sure it does not allow recursive queries.
2. Make sure it does not allow zone transfers from unauthorized hosts.
3. Make sure it is not vulnerable to dns cache poisoning.

Anything other vectors we could look at?

Cheers.


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


__________________________________________________
Fale com seus amigos de graça com o novo Yahoo! Messenger
http://br.messenger.yahoo.com/

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

Relevant Pages

  • Re: testing dns servers
    ... nslookup, txdns,dig, host, bile suites, etc. ... Make sure it is not vulnerable to dns cache poisoning. ... Are you using SPI, Watchfire or WhiteHat? ... Consider getting clear vision with Cenzic ...
    (Pen-Test)
  • Re: Sneaking a peek on Wlan in airports
    ... Are you using SPI, Watchfire or WhiteHat? ... Consider getting clear vision with Cenzic See HOW Now with ...
    (Pen-Test)
  • RE: Sneaking a peek on Wlan in airports
    ... Are you using SPI, Watchfire or WhiteHat? ... Consider getting clear vision with Cenzic See HOW Now with ...
    (Pen-Test)
  • Re: Sneaking a peek on Wlan in airports
    ... Are you using SPI, Watchfire or WhiteHat? ... Consider getting clear vision with Cenzic ...
    (Pen-Test)
  • Re: Sneaking a peek on Wlan in airports
    ... That being said, when you see POP3 password, SMTP mail data, HTTP base64 encoded basic authentication data on an unsecured wlan, the obvious thing to do is see if it gets you free porn somehow. ... Watchfire or WhiteHat? ... > Consider getting clear vision with Cenzic See HOW Now with ...
    (Pen-Test)