Module 7: DNS Poisoning

DNS poisoning takes advantage of DNS server’s table of IP addresses and host names by replacing the IP address of a host with another IP address that resolves to an attacker’s system. For example, an attacker can masquerade his or her own web server by poisoning the DNS server into thinking that the host name of the legitimate web server resolves to the IP address of the attackers web server.

References:

Samuelle, T., & Meyers, M. (2009). Network Security. In CompTIA security certification (2nd ed., p. 88). New York: McGraw-Hill.

[nigelmtb]

This is an incorrect and incomplete explanation. If the cache was already poisoned with the false IP address from the attacking server then no lookup would take place. The DNS server would not contact the authoritative server because it already had the answer in the cache. It would instead return the IP address of 203.74.17.2 to the client as the IP address of XYZ.com. You do not explain how the cache came to be poisoned in the first place.

[miefacaca]

mejor no publiques videos q no sabes explicar.