How To Protect Yourself Against DNS poisoning
|
|
| DO NOT TRY THIS AT HOME : Rotteneggs.com text files and message bases are for INFORMATIONAL PURPOSES ONLY. DO NOT undertake any project based upon any information obtained from this or any other web site.We are not responsible for, nor do we assume any liability for, damages resulting from the use of any information on this site. |
|
|
|
(76 votes)
Published: Jul 29, 2008 6:57 a.m.
Viewed 705 times |
first of all, i dont even know if its called DNS poisoning, thats what i decided to call it.
This is egg is to protect yourself against the recently found DNS exploit. there was a thread on this in the GD, it can be found here.
Quote:
US-CERT’s Vulnerability Note VU#800113 describes deficiencies in the DNS protocol and implementations that can facilitate cache poisoning attacks. The answers from a poisoned nameserver cannot be trusted. You may be redirected to malicious web sites that will try to steal your identity or infect your computers with malware. On August 7, 2008, Dan Kaminsky will release the details of how such attacks can be launched against vulnerable DNS resolvers.
The essence of the problem is that DNS resolvers don’t always use enough randomness in their transaction IDs and query source ports. Increasing the amount of randomness increases the difficulty of a successful poisoning attack.
Quote:
Basically, this means that any page you want to go to can be replaced by some idiot with a 5cript kiddie hacking tool (they’re in the wild now) and start logging your traffic, giving you viruses, phishing passwords, and many other attacks.
test your vulnerability here
I shall now proceed to tell you how to protect yourself from this exploit, and speed up your browsing too using openDNS
WIN XP
go to Control Panel --> Network and Internet Connections --> Network Connections, right-click your network connection from the Network Connections window, and select Properties. A box like this will pop up:
go to to the Internet Protocol (TCP/IP) listing and select Properties. At the bottom of the screen, select "Use the following DNS server addresses." For the Preferred DNS server, put this in: 208.67.222.222. For the Alternative DNS server, put in this: 208.67.220.220. Click OK, and then click Close. it should look like this:
you might have to restart your computer, but i didnt.
then go test it again using the link on top and PROFIT!!!! |
|
|
|
 | Jul 29, 2008 7:57 am -
I shall make an egg on doing this in vista if so needed. |
 | Jul 29, 2008 7:57 am -
5*
does this pertain to macs? |
| Jul 29, 2008 8:00 am -
it does, but i dont know how to change the default dns server on a mac. |
 | Jul 29, 2008 9:39 am -
Make it for vista!
I ran the test and it said my thing was GOOD and the other one was GREAT. I rock. |
 | Jul 29, 2008 11:54 am -
Vista:
Control Panel> Network and Sharing Center> Manage Network Connections (On left side)>Right Click your connection and go to properties> select the protocol and hit properties and then enter the adresses |
 | Ju 29, 2008 1:22 pm -
NICE EGG 5 STAR |
 | Jul 29, 2008 1:30 pm -
I’m great on both tests, so I don’t need this but I will rate anyway. |
| Jul 29, 2008 5:13 pm -
It’s saying the address isn’t valid or some shit. |
 | Jul 30, 2008 2:27 am -
I got great and great! yay, 5* cause now i’m happy :D |
 | Jul 30, 2008 6:47 pm -
Meh, 3’s. Most people who know what a dns is knows how to change it |
 | Aug 02, 2008 3:48 am -
arp poisoning ;) |
 | Aug 02, 2008 6:50 am -
I read that the problem was fixed and patches were sent out fixing the problem, good egg 5*. |
 | Aug 18, 2008 11:38 am -
Quote from FuckingMoron: Wow!! ive found this egg very usefull,even though i have ZONEALARM FIREWALL,AVAST HOMEEDITION AND ANTI MALWARE REMOVAL.. you fucking suck.
Congrats, you have free software that "protects" against viruses. That means this egg "doesn’t" pertain to you.
Other people, on the other hand, I wonder if they might find this useful? Naw. |
 | Aug 21, 2008 9:16 am -
i got linex installed in a file somewhere so if i have any problem i switch to linex, find the problem then store it in my flash drive. then bring the flash drive to school and empty on the persons computer next to me. 5* |
 | Aug 26, 2008 12:23 pm -
great egg 5* |
 | Nov 12, 2008 1:07 pm -
Quote: mastaj
Aug 21, 2008 9:16 am -
i got linex installed in a file somewhere so if i have any problem i switch to linex, find the problem then store it in my flash drive. then bring the flash drive to school and empty on the persons computer next to me. 5*
Linex? O_o
Linux maybe?
regardless, 5*. |
|
|
Edit Page
Message krazyduck
Add Comment
Add to Favorites
Email to Friend