News for hackers. Stuff that matters.
Re:We Built Our Own DNS Infrastructure by 0x0 on Friday April 30, 2021 @06:53AM (#26991858)
No, you can do it blindly. For example, if you have a web page that has an <img> tag pointing to a specific domain, then you can assume the client will perform a DNS lookup, so you can send fake replies blindly, hoping it will match a lookup request that you don't see.

Adding mixed case matching makes it more difficult to make a lucky guess when sending a fake reply blindly.

There are no comments on this comment yet.