So, unless you’ve been hiding under a rock for the last little while you’ll know that Dan Kaminsky broke DNS in a rather big way.
And you’d know that the gory details hit the tubes of the internet a couple days ago.
Hell, there was even a poem about the whole mess. (bless you Hoff)
Now, the DNS ‘sploit has been weaponized. HD Moore and company over at Metasploit have released it. For a full write up on it check out our friend, Nate McFeter’s, blog posting on the DNS exploit. Yes, it is being actively exploited.
This storm has of course reignited the inevitable (and tiresome) disclosure debate. Let me save you the trouble and cut right to the chase…
PATCH YOUR FSCKING DNS SERVERS.
Consider yourselves warned…again.
OK, I’m tired talking about this subject. What else is going on in the world?
[tags]DNS Exploit, Exploit Code, DNS Hack, HD Moore, |)ruid, Dan Kaminsky[/tags]
Thanks for the coverage gents! Further, thanks for the link about HD’s tweets. If you don’t mind, might link back to you with my blog with a quick update on HD’s comments.
@Nate
Not a problem mate. Feel free.
Have a great weekend.
So there is indication of real exploitation after all.
hi, andar here, i just read your post. i like very much. agree to you, sir.