RE: Detecting DNS Servers

From: Pete Herzog <pete(at)isecom.org>
Date: Sun Jul 13 2003 - 16:44:57 EDT

This may sound obvious but what about making DNS requests to them and grabbing the packets. Some DNS servers will give away who they are in the packet capture. If you do it methodically, you can seperate out the different response types and for the unknown ones, hit GOOGLE with the string. You probably did that already though maybe.

I'm not sure if there is a DNS fingerprinting tool though. I never needed one before.

Sincerely,
-pete.

> -----Original Message-----
> From: Jim [mailto:ps2man@dodo.com.au]
> Sent: Saturday, July 12, 2003 07:48 AM
> To: pen-test@securityfocus.com
> Subject: Re: Detecting DNS Servers
>
>
> Alot of dns severs specifiy they are dns servers in there host

---

Your network Firewall and IDS products do not prevent Web application exploits - the most common form of online attack - resulting in Web defacement, data theft, sabotage and fraud.

KaVaDo is the first and only company that provides a complete and an integrated suite of Web application security products, allowing you to assess your entire environment, automatically set positive security policies and maintain it without compromising business performance.

For more information on KaVaDo and to download a FREE white paper on Web applications - security policy automation, please visit: http://www.kavado.com/ad.htm

---

Received on Mon Jul 14 14:04:55 2003