Basic HTML version of Foils prepared May 19 99
Foil 19 DNS Cache Poisoning (2)
From Computer Crimes: Examples of Network Security attacks Tango Group Internal Technology Seminars -- April 23 99. by Roman Markowski
1 |
Evil
|
2 |
x.y.z.w
|
3 |
DNS
|
4 |
good
|
5 |
DNS
|
6 |
evil
|
7 |
DNS
|
8 |
bank
|
9 |
(1) any.evil.com ?
|
10 |
(2) any.evil.com ?
|
11 |
(3) store Query ID#
|
12 |
(4) www.bank.com ?
|
13 |
(5) www.bank.com ?
|
14 |
(6) spoof answer:
|
15 |
www.bank.com=x.y.z.w
|
16 |
(7) Cache:
|
17 |
www.bank.com
|
18 |
= x.y.z.w
|
19 |
Good
|
20 |
(8) www.bank.com ?
|
21 |
(9) x.y.z.w
|
22 |
(10) bank transaction
|
23 |
Www
|
24 |
bank
|
© Northeast Parallel Architectures Center, Syracuse University, npac@npac.syr.edu
If you have any comments about this server, send e-mail to webmaster@npac.syr.edu.
Page produced by wwwfoil on Mon Aug 16 1999