Psst, Your DNS is Showing: Uncovering Vulnerabilities in DNS and Password Managers. | HackerNoon

The Domain Name System (DNS) is often likened to the internet's phone book, translating human-friendly domain names into IP addresses that computers use to identify each other on the network.

This openness, while essential for the seamless operation of the internet, creates an attack surface that can be manipulated by bad actors.

One of the most common attacks that exploit DNS is DNS spoofing or cache poisoning. In these attacks, the attacker corrupts the DNS cache, causing the DNS server to return an incorrect IP address.

Cyber-criminal group KILLNET's use of DNSDumpster illustrates real-world exploitation of DNS vulnerabilities to conduct reconnaissance before attacks.

Read at Hackernoon