Monday, April 2, 2007

Exploiting Microsoft DNS Dynamic Updates for Fun and profit

By default, most Microsoft DNS servers integrated with active directory allowinsecure dynamic updates for dns records.This feature allows remote users to create, change and delete DNS records.There are several attack scenarios:You ARE using Microsoft for you DNS right? NOT!!!



read more | digg story

No comments: