Install A DNS Server For Out Of Band Attacks

1 Jan 2022, 7 a.m.
00:36 minutes
DNS

An out of band DNS Server can be useful for a variety of use cases during a pentest or Red Team engagement. Two common purposes are for DNS Data Exfiltration and DNS Spoofing. Maradns makes it easy for us to do this.

    Update the Sources List

    apt-get update
    

    Upgrade the Server

    apt-get upgrade
    

    Install the Mardns server

    apt-get install maradns
    

    Move into the Maradns folder then start editing the config

    cd /etc/maradns/
    nano mararc 
    

    Make the following edits to the marac config file

    csv2 = {}
    csv2["evilsaint.com."] = "db.evilsaint.com"
    bind_address = "45.32.176.126"
    

    Create the Zone File

    nano db.evilsaint.com
    

    Inside our file

    %        NS        ns.% ~
    *.%      A         45.32.176.126 ~
    

    Run the DNS Server

    maradns -f mararcls
    

    Captcha: What's the standard TCP port of the following service?

    captcha

    0 comments