dns Archives - Recon Bee

China-Linked ‘Muddling Meerkat’ Hijacks DNS to Map Internet on Global Scale

30Apr

By RBNo Comments

News

China-Linked ‘Muddling Meerkat’ Hijacks DNS to Map Internet on Global Scale

Since October 2019, a previously unreported cyber threat known as Muddling Meerkat has been seen engaging in complex domain name system (DNS) operations in an apparent attempt to get around security barriers and do network reconnaissance worldwide. The threat actor, according to cloud security company Infoblox, is probably connected to the People's Republic of China (PRC) and has the ability to manage the Great Firewall (GFW), which filters access to foreign websites and controls internet traffic into and out of the nation. The reference to their "bewildering" operations and their misuse of DNS open resolvers, or DNS servers that allow recursive queries from any IP address, to transmit requests from the Chinese IP space is the reason behind the term. The business stated in a stud...

ExpressVPN bug has been leaking some DNS requests for years

12Feb

By RBNo Comments

News

ExpressVPN bug has been leaking some DNS requests for years

After discovering that a fault allowed users to reveal the domains they were browsing to configured DNS servers, ExpressVPN deactivated the split tunneling capability from the most recent version of their software. The flaw only affected users of the split tunneling feature and was first introduced in ExpressVPN Windows versions 12.23.1–12.72.0, which were released between May 19, 2022, and February 7, 2024. For users who require both secure distant access and local access at the same time, split tunneling offers the freedom to route specific internet traffic in and out of the VPN tunnel. Due to a problem in this feature, users' DNS requests were sent to their internet service provider (ISP) read more ExpressVPN bug has been leaking some DNS requests for years.

29Nov

By DexterNo Comments

Business

DNSenum – DNS Information Gathering

Overview Dnsenum is an open-source DNS information gathering tool to find DNS information of a domain and discover non-contiguous IP blocks. Its main purpose is to gather as much information as possible about a domain. DNSenum is scripted in Perl that also supports multithreading to speed up the scans. Its features are: Get the host’s addresses (A record). Get the name servers (threaded). Get the MX record (threaded). Perform axfr queries on nameservers and get BIND versions(threaded). Get extra names and subdomains via google scraping (google query = “allinurl: -www site:domain”). Brute force subdomains from a file. can also perform recursion on subdomains that have NS records (all threaded). Calculate C class domain network ranges and perform whois querie...

16Nov

By DexterNo Comments

Business

DNSrecon – DNS Reconnaissance for Pentesting

Overview The first stage of penetration testing is reconnaissance (information gathering). One method of reconnaissance is by gathering the target's DNS information, such as DNS records and DNS servers. This information can be used to piece together the network infrastructure of an organization. Additionally, it does not trigger an alert from the organisation's firewall or IDS/IPS. A tool that helps us accomplish this is DNSrecon. As the name implies, DNSrecon is a DNS reconnaissance tool that can extract DNS-related information from a website/domain. Here is a list of its features (according to the source repository): Check all NS Records for Zone Transfers. Enumerate General DNS Records for a given Domain (MX, SOA, NS, A, AAAA, SPF and TXT). Perform common S...