dnsproblem

Jul 31 2008

DNS Victims

Everything is a freaking DNS problem , and when you warn people about it , you get a piece of your own cake ;(

So it seems that HD Moore was Misquoted in the press.

So there's victims and victims. Surely Metasploit's credibility will go down as lots of people will only read the first article .. let alone the Metasploit blog that has more details.

Apr 01 2008

Ze Tishirt

As different people last weekend asked me and Serge ran into one again .

Here's where to get the T-Shirt : dnsproblem.spreadshirt.net

Yes Bart your SO also asked me !

Mar 17 2008

How NOT to figure out a nameserver

So I was trying to install this piece of software that I wanted to test ..
It came with a weird installscript that kept telling me it couldn't ping tom my nameserver

  1. .. checking network access via ping to DNS/IP: IN
  2. ...... unable to ping: IN : ping returned: 2
  3. unable to ping DNS name server: IN
  4. 192.168.1.209 : ping returned code: 2

Now why would it tro to ping IN ?

This is why .. the scripts tries to find out my nameserver using dig

  1. root@C51 ~]# dig localhost | grep SERVER | cut -d# -f 1| awk '{print
  2. $3}'
  3. IN
  4. 192.168.1.209

It didn't expect to get this feedback from dig

  1. [root@C51 ~]# dig localhost
  2.  
  3. ; <<>> DiG 9.3.3rc2 <<>> localhost
  4. ;; global options: printcmd
  5. ;; Got answer:
  6. ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32043
  7. ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
  8.  
  9. ;; QUESTION SECTION:
  10. ;localhost. IN A
  11.  
  12. ;; AUTHORITY SECTION:
  13. . 10215 IN SOA A.ROOT-SERVERS.NET.
  14. NSTLD.VERISIGN-GRS.COM. 2008031700 1800 900 604800 86400
  15.  
  16. ;; Query time: 7 msec
  17. ;; SERVER: 192.168.1.209#53(192.168.1.209)
  18. ;; WHEN: Mon Mar 17 21:02:50 2008
  19. ;; MSG SIZE rcvd: 102

Sep 03 2007

Buy the T-Shirt

Couple of people again have asked me where I got the t-shirt

I actually made it myselve and you can buy it from Spreadshirt

Aug 07 2007

Brandweer Waarschoot

The Brandweer Waarschoot has a funky DNS problem.
Weird how the "real press" claims their site has been "hacked".

Well.. it happened to everybody and their rother earlier this decade .. they only got lucky a brave soul used his credit card for the right goal.