Web Hack List

Collected research

All Your DNS Records Point to Us: Understanding the Security Threats of Dangling DNS Records

All Your DNS Records Point to Us Understanding the Security Threats of Dangling DNS Records

A dangling DNS record points at a resource that no longer exists but was never purged. The paper identifies three vectors by which an attacker can claim the abandoned resource and take over the domain or subdomain, including having a certificate authority issue a certificate for it, finds 467 exploitable records across 277 of the Alexa top 10,000 and 52 edu zones, and proposes three defences.

Record

Document
All Your DNS Records Point to Us Understanding the Security Threats of Dangling DNS Records
Researcher
Daiping Liu, Shuai Hao and Haining Wang
Published by
W&M ScholarWorks
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Daiping Liu, Shuai Hao and Haining Wang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .