2016-010-DNS_Reconnaissance

BrakeSec Education Podcast

English - March 07, 2016 05:32 - 49 minutes - 45.7 MB - ★★★★★ - 98 ratings
Tech News News Technology cisa cissp legal pentesting podcasts application compliance computersecurity cybersecurity education Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: 2016-009-Brian Engle, Information Sharing, and R-CISC

Next Episode: 2016-011-Hector Monsegur, deserialization, and bug bounties

DNS... we take it for granted... it's just there. And we only
know it's broken when your boss can't get to Facebook.

This week, we discuss the Domain Naming System (DNS). We start
with a bit of history, talking about the origins of DNS, some of
the RFCs involved in it's creation, how it's hierarchical structure
functions to allow resolution to occur, and even why your
/etc/hosts is important.

We discuss some of the necessary fields in your DNS records. MX,
ALIAS, CNAME, SOA, TXT, and how DNS is used for non-repudiation in
email.

We also touch on how you can use DNS to enumerate an external
network presence when you are the red team, and what you should
know about to make it harder for bad actors to not use your
external DNS in amplification attacks.

Finally, you can't have a discussion about DNS without talking
about how to secure your DNS implementation. So we supply you with
a few tips and best practices.

Plenty of informational links down below, including links to the
actual RFCs (Request for Comment) which detail how DNS is supposed
to function. Think of them as the owner's manual for your car.

Direct Download: http://traffic.libsyn.com/brakeingsecurity/2016-010-DNS_Reconnaissance.mp3

#iTunes: https://itunes.apple.com/us/podcast/2016-010-dns-reconnaissance/id799131292?i=364331694&mt=2

Comments, Questions, Feedback: [email protected]

Support Brakeing Down Security using Patreon: https://www.patreon.com/bds_podcast

RSS FEED: http://www.brakeingsecurity.com/rss

On #Twitter: @brakesec @boettcherpwned @bryanbrake

#Facebook: https://www.facebook.com/BrakeingDownSec/

#Tumblr: http://brakeingdownsecurity.tumblr.com/

Google Play Store: https://play.google.com/music/podcasts/portal/#p:id=playpodcast/series&a=100584969

Player.FM : https://player.fm/series/brakeing-down-security-podcast

Stitcher Network: http://www.stitcher.com/s?fid=80546&refid=stpr

TuneIn Radio App: http://tunein.com/radio/Brakeing-Down-Security-Podcast-p801582/