PolarDNS – A Free DNS Server For Vulnerability Research & Pentesting – CybersecurityNews

DNS (Domain Name System) decodes human-readable domain names into IP addresses. In vulnerability research and pentesting, analyzing DNS can reveal the following potential attack vectors that could help in identifying security flaws:-
Besides this, the DNS data can also provide insights into the network infrastructure, which helps map potential targets.
Oryxlabs recently launched a free DNS server written in Python 3.x for vulnerability research and pentesting, dubbed “PolarDNS.”
In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked. The session will cover: an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway
This free DNS server, PolarDNS, enables its operators to produce fully custom DNS responses for several DNS protocol testing purposes. This free server can be used for the testing of the following things:-
Over the DNS protocol layer, the operator of the PolarDNS gets full control as it supports the following two protocols:-
It is also capable of producing the following DNS responses:-
However, this could be useful for the following purposes:-
Besides this, for diverse DNS responses, the PolarDNS offers numerous built-in features and modifiers.
Combining them creates countless response variants, enabling testing of receivers’ handling of unusual, abnormal, and malformed DNS responses for technical robustness.
Here below, we have mentioned some of the DNS responses produced by PolarDNS that could contain the following things:-
Apart from this, all these data can aid in identifying several vulnerabilities like:-
With basic Python and DNS protocol understanding, PolarDNS facilitates easy implementation of:-
How to Run it?
python polardns.py
Installation
pip3 install pyyaml
Experience how StorageGuard eliminates the security blind spots in your storage systems by trying a 14-day free trial.

source

About The Author

admin

See author's posts