Sometimes a simple check of length is all you need

by Security Dude

Screen Shot 2012-12-10 at 2.11.57 PM

MD5 hashed DNS requests to “badguy.com”

Screen Shot 2012-12-10 at 2.14.42 PM

SHA1 hashed DNS requests to “badguy.com”

Screen Shot 2012-12-10 at 6.06.25 PM

Twisted local DNS server with all my DNS being evaluated

Screen Shot 2012-12-10 at 6.17.11 PM

Here is just the query name request

Screen Shot 2012-12-10 at 10.03.04 PM

DNS Server receiving hashed message and message parsed out

Screen Shot 2012-12-11 at 4.40.37 PMDNS Server message received and DNS queries being handled

dns-packet-hex

3-stats-dns-logs

https://discussions.nessus.org/thread/5298

Advertisements