Full Disclosure mailing list archives

Re: DNS poisoning


From: "Aaron Gray" <angray () beeb net>
Date: Wed, 28 Jun 2006 03:29:55 +0100

You would need to hack the program code of BIND or what ever DNS server software you are using.

Aaron

----- Original Message ----- From: "Saeed Abu Nimeh" <drellman () hotmail com>
To: <full-disclosure () lists grok org uk>
Sent: Tuesday, June 27, 2006 10:47 PM
Subject: [Full-disclosure] DNS poisoning


Is there a way to do dns poisoning and make the poisoned server provide
legitimate queries when doing dns lookup. Example: Assume I am running a
poisoned dns server, when user X does lookup yahoo.com or dig yahoo.com
I reply with legit yahoo entries, however, when user Y does the same
thing I provide fake or spoofed entires.
Thanks,
Saeed

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.9.5/377 - Release Date: 27/06/2006


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: