Dynamic DNS Update Injection

dyn_dns_update module allows adding or deleting DNS records on a DNS server that allows unrestricted dynamic updates.

Vulnerable Application

Any DNS server that allows dynamic update for none trusted source IPs.

Verification Steps

1. Start msfconsole
2. Do: auxiliary/scanner/dns/dyn_dns_update
3. Do: set DOMAIN [IP]
4. Do: set NS [IP]
5. Do: set INJECTDOMAIN [IP]
6. Do: set INJECTIP [IP]
7. Do: set ACTION ADD
8. Do: run

Actions

There are two kind of actions the module can run:

1. ADD - Add a new record. [Default]
2. DEL - Delete an existing record.

Targeting Information

WPAD may not work with Windows 2008+ targets due to a DNS block list: https://technet.microsoft.com/en-us/library/cc995261.aspx