Hack Forums
[Notorious] Ultimate DNS Guide for beginners - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [Notorious] Ultimate DNS Guide for beginners (/showthread.php?tid=5535456)

Pages: Pages 1 2 3

[Notorious] Ultimate DNS Guide for beginners - bzrΚ - Jan 27, 2017

[Image: Ep5KL3l.gif]
One of the most common things I see around here these days is people asking about DNS', what they are, how they work and arguing whether they're even worth using. This thread will hopefully clear up some of this confusion with a breakdown for each aspect.

Let's start from the top.

What does DNS stand for?

DNS stands for Domain Name System

What does a DNS actually do?

Think of a Domain Name System as a phonebook, but instead of phone numbers of local bussinesses and neighbours, they contain domain names that refer to IPs. E.g. Google's domain is http://google.co.uk but it's IP is 216.58.214.3

[Image: iZhvINu.gif]

What's the point?

There are many use cases for a DNS, here are a few applicable cases for a DNS DOES.
  • Make browsing the web much more user friendly
  • Provide fall back for webservices if using multiple DNS' and one fails (multiple domains).
  • Always calls back even if the IP changes
  • Heavily used in e-mail and IM

However, a DNS DOES NOT.
  • Provide any level of anonymity (!!!)
  • Serve as a replacement for IP Addresses

[Image: Gjdmq8m.gif]


So that's the very basics of a DNS. How does it work?

There are 3 main stages involved in the functioning of a DNS, starting from the first to the final destination, it looks a little like this:

  1. Your computer asks for an address to http://example.com

  2. You reach the DNS server and it tries to find the IP that the DNS belongs to. Should the first DNS server not find it it moves onto the next one and so forth until it (hopefully) finds the IP. This is also cached for x amount of time to speed up the process for future visitors.

  3. The DNS server responds to you and sends back the IP, e.g. 216.58.214.3 (google.co.uk). Your machine then connects to that IP.

[Image: Gjdmq8m.gif]

What place this has in the RATing community

The part of a DNS that is relevant in this scenario is using a DDNS, or Dynamic Domain Name Service, if you ask me it's a core tool that you should utilize properly. Not all IPs are static, and quite often they change regardless of if you're using a VPN or not. So below are some suggestions of some DNS' that I personally recommend, as well as some which you should never use.

The difference between DNS and DDNS is that an IP will automatically update in real-time, giving you fallback whenever the IP changes, your clients will redirect to the new IP, since they actually try to connect to yourdns.dns.com instead of an IP.

DNS examples I have tested and / or recommend:
DNS' listed here I have either used and recommend to others or I know are trust worthy and recommend to others.

- Offers free DNS services
- Uses a dedicated client
- Requires domain

- Offers free DNS services
- Uses a dedicated client (optional)
- Requires you to buy a NameCheap domain - typically $0.99

- Offers premiumDNS services at ~$5/year
- Uses a dedicated client (optional)

- Offers a paid service
- Trustworthy
- Reliable


DNS examples I have not tested personally:
DNS' listed here I have NOT used but look fine to use. - Offers freeDNS service

- Offers freeDNS service

DNS' you should never use:
DNS' listed here you should not use under any circumstances. - Owned by Microsoft and in collaboration with SpamHaus. These guys will shut you down.
- DO NOT USE.

- Working with SpamHaus, actively block malicious domains.

- Working with SpamHaus, actively block malicious domains.

- Working with SpamHaus, actively block malicious domains.


- Actively block malicious use


Will add more DNS to each category as I see fit.

How to setup your DNS?

The process for setting up a DNS varies very little from service to service. Should you need help setting one up Purple Kief's Mega-thread has an indepth guide on doing so: https://hackforums.net/showthread.php?tid=5327327

If you need any extra help please PM me for support.

[Image: iZhvINu.gif]


* - TheChiеf - Jan 27, 2017

Seems like a pretty helpful thread for beginners to know about DNS and its use in RATs. 👍

* - Purple Kief - Jan 27, 2017

That's a very informative and well laid out thread.
Thank you homie. :)

* - Armada - Jan 27, 2017

Very well written thread man.
THanks for the recommendation as well. :-D

* - GammaDune - Jan 27, 2017

This is an awesome guide I've been in the market for a new DNS. How do you host a domain on the free DNS offered by Namecheap?

* - bzrΚ - Jan 27, 2017

(Jan 27, 2017 12:22 PM)TheChiеf Wrote:  Seems like a pretty helpful thread for beginners to know about DNS and its use in RATs. 👍

(Jan 27, 2017 12:29 PM)Purple Kief Wrote:  That's a very informative and well laid out thread.
Thank you homie. :)

(Jan 27, 2017 12:53 PM)Armada Wrote:  Very well written thread man.
THanks for the recommendation as well. :-D
Thanks guys appreciate it
(Jan 27, 2017 01:10 PM)GammaDune Wrote:  This is an awesome guide I've been in the market for a new DNS. How do you host a domain on the free DNS offered by Namecheap?

You don't host a domain. You buy one from them and name cheap has a built-in in set of tools on there site that allow you to set it up as a DNS service

* - anonymous120 - Jan 27, 2017

Great thread vouch for you.

* - VirtualMon3y - Jan 28, 2017

Nice informative thread buddy. 🤝

* - bzrΚ - Jan 29, 2017

(Jan 27, 2017 03:29 PM)anonymous120 Wrote:  Great thread vouch for you.

(Jan 28, 2017 11:51 AM)UKninja Wrote:  Nice informative thread buddy. 🤝

Thanks guys :) Noticed a few adjustments /additions I can make and will add them soon.

Know a DNS I can add to this list? Let me know.

* - Ace of Knaves - Feb 1, 2017

This is absolutely brilliant. Thanks mate - appreciate this a ton. I'll go ahead and close my NO-IP tabs lol. I swear they were the ones to use when I last RAT'd but that was 5 years ago

* - RastaManKing - Feb 6, 2017

Very useful, thank you 🤝

* - TheChiеf - Feb 10, 2017

Just bumping this up for users to make use of this :)

* - kevy42 - Feb 20, 2017

soo in other words.. dynudns is safe to use, dosnt honeypot?

* - bzrΚ - Feb 20, 2017

(Feb 20, 2017 07:28 AM)WeedmasterOG Wrote:  soo in other words.. dynudns is safe to use, dosnt honeypot?

As of right now, yes. Obviously the safest option will always be to do it yourself though

* - kevy42 - Feb 20, 2017

(Feb 20, 2017 07:32 AM)ɓzrk Wrote:  As of right now, yes. Obviously the safest option will always be to do it yourself though

u mean like namecheap?