Re: DNS Cache Poisoning attack

[Joel Esler <joel.esler () mac com>]

There are Shared Object rules available for the DNS Cache Poisoning  
attack that are VRT certified available via subscription at www.snort.org 
.

J

On Jul 16, 2008, at 10:38 PM, Ravi Chunduru wrote:

> Does anybody have snort or Intrupro-IPS signature(s) to detect DNS
> Cache Poisoning attack?
> Also, is there any PoC to simulate the attack and test the
> effectiveness of signature(s)?
>
> thanks
> Ravi
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------