CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutSign UpSign In
rapid7

CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!

GitHub Repository: rapid7/metasploit-framework
Path: blob/master/documentation/modules/auxiliary/admin/dns/dns_dyn_update.md
Views: 1904

Dynamic DNS Update Injection

dyn_dns_update module allows adding or deleting DNS records on a DNS server that allows unrestricted dynamic updates.

Vulnerable Application

Any DNS server that allows dynamic update for none trusted source IPs.

Verification Steps

  1. Start msfconsole

  2. Do: auxiliary/scanner/dns/dyn_dns_update

  3. Do: set DOMAIN [IP]

  4. Do: set NS [IP]

  5. Do: set INJECTDOMAIN [IP]

  6. Do: set INJECTIP [IP]

  7. Do: set ACTION ADD

  8. Do: run

Actions

There are two kind of actions the module can run:

  1. ADD - Add a new record. [Default]

  2. DEL - Delete an existing record.

Targeting Information

WPAD may not work with Windows 2008+ targets due to a DNS block list: https://technet.microsoft.com/en-us/library/cc995261.aspx