Off The Record - Weaponizing DHCP DNS Dynamic Updates
...As every sysadmin knows - DNS is hard. It is a complex ecosystem with many moving pieces. One such “piece“ is a seemingly harmless feature in the DHCP protocol called “DHCP DNS Dynamic Update“, which allows a DHCP server to register DNS records on behalf of its clients. This feature is also present and enabled by default in the Microsoft DHCP server, one of the most common DHCP servers in the market.
In this session, we will explore this feature and show the attack surface it exposes in Microsoft environments - we will detail a novel attack tactic that could allow unauthenticated attackers to spoof arbitrary DNS records in Active Directory DNS zones, and show how this could be abused to intercept authentication and achieve remote code execution. We will examine the different security settings that should prevent these attacks, and show how they fail to do so in some cases....
By: Ori David
Full Abstract and Presentation Materials:
#off-the-record---weaponizing-dhcp-dns-dynamic-updates-35439
1 view
0
0
1 week ago 00:03:37 1
Админы Актуального Курска и другие куряне, покажите общественные туалеты Курска .?!) #курскиймайор
2 weeks ago 00:03:01 1
Ivy from MRLsexdoll
2 weeks ago 00:03:02 1
SPX Options Trading : Strategies for Big Gains!
2 weeks ago 00:04:18 1
Real Life Elementary Episode 1.
2 weeks ago 00:00:35 1
This Takodachi Bites Ina
2 weeks ago 00:01:03 1
Call of Duty: Black Ops 6 - Official The Replacer in “Wheel of Fortune“ Trailer
3 weeks ago 00:01:06 1
Warhammer: Vermintide 2 - Versus PvP Mode | Release Trailer
3 weeks ago 00:04:14 1
The Hunter - Bloodborne (4K UHD 2024)
3 weeks ago 00:06:46 1
Surprise: Fog in March. Louis enjoys his morning kayaking (4 K- High Video quality)
3 weeks ago 00:14:36 1
TOP 40❗FAILS 4X4 THE CRAZIEST OFF ROAD ACCIDENTS ❌ INSANE FAILS AND WINS AMAZING VEHICLES 2024
3 weeks ago 00:11:43 1
AliExpress Is DEAD!? (FASTEST Shipping option)
3 weeks ago 00:06:19 1
CYBEX Cloud T i-Size Car Seat Tutorial
3 weeks ago 00:19:20 1
Blue Ribbon: Story of the Build
3 weeks ago 00:03:57 1
Don Toliver - BROTHER STONE (FEAT. KODAK BLACK) [Official Music Video]
3 weeks ago 00:09:01 1
Anna Amalie von Preußen (1723-1787) - Sonata per il Flauto traverso (1771)
3 weeks ago 03:13:09 1
СБОРКА ПК на AMD Ryzen 7 7700 и RTX 4070 Ti Super! #shorts
3 weeks ago 00:04:29 1
MAJESTICA - Power Train (OFFICIAL MUSIC VIDEO)
3 weeks ago 00:03:17 1
Renesans - Less Than Nothing (Official Music Video)
3 weeks ago 00:20:02 1
NEW Thermaltake TH360 V2 Ultra ARGB Sync AIO CPU Water Cooler With IPS LCD Screen
3 weeks ago 00:01:20 1
MASS DEFFECT ~ 10 ~ Reaper Cockalorum
4 weeks ago 00:44:35 1
40MIN Total Body Strength Training (Dumbbell Workout At Home)
4 weeks ago 00:05:15 3
Diablo - Tristram Theme (Gingertail Cover)
4 weeks ago 00:27:00 16
Шаман - EBOSHER | Бой Вечера | TOP DOG 19
4 weeks ago 00:03:01 1
The Offspring - The Kids Aren’t Alright (Russian Cover by RADIO TAPOK / Кавер)