Preliminary research
One Char to Rule Them All: DNS Silent Vulnerabilities in Domain Name Resolution
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
The SHAR (special-characters) attack against DNS. RFC 1035 and RFC 2181 disagree on which characters domain labels may contain, and DNS components handle unsupported characters inconsistently, many silently dropping the query with no response. That silence enhances 10 of 13 off-path cache-poisoning attacks, revives TxID/port brute-force poisoning by widening the spoofing window, and disrupts nameserver load-balancing for persistent DoS. Tested across 31 DNS implementations and 12.5M domains.
Record
- Researcher
- Fasheng Miao, Xiang Li, Changqing An and Jilong Wang
- Published by
- i.blackhat.com
- Format
- Whitepaper
- Topic
- Browser
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Fasheng Miao, Xiang Li, Changqing An and Jilong Wang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .