Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.

Dynamic DNS Update Injection

dyn_dns_update module allows adding or deleting DNS records on a DNS server that allows unrestricted dynamic updates.

Vulnerable Application

Any DNS server that allows dynamic update for none trusted source IPs.

Verification Steps

1. Start msfconsole

2. Do: auxiliary/scanner/dns/dyn_dns_update

3. Do: set DOMAIN [IP]

4. Do: set NS [IP]

5. Do: set INJECTDOMAIN [IP]

6. Do: set INJECTIP [IP]

7. Do: set ACTION ADD

8. Do: run

Actions

There are two kind of actions the module can run:

1. ADD - Add a new record. [Default]

2. DEL - Delete an existing record.

Targeting Information

WPAD may not work with Windows 2008+ targets due to a DNS block list: https://technet.microsoft.com/en-us/library/cc995261.aspx