[liam270591]

Could someone explain to me the basics of DNS amp scanning and how to use the information you find to your advantage I read a small article about this and I was very interested yet I know nothing about it. I usually rely on my IRC for such activity

[Legion]

The basics of DNS scanning:

You enter an IP range into the DNS scanner script, it then scans the IP ranges for misconfigured DNS resolvers. It then stores the IP's of the vulnerable DNS resolvers in a text file.

Say your server IP is 127.0.0.1 , rather than requesting information to it's own IP, it requests the information to be sent to the victim's IP. In order to do this you must have a server that allows IP header modification. You request information on large websites that have many subdomains. This way 1 packet gets sent from your server and you get many more packets back. 40 bytes can get amplified to around 4000 bytes. This is done because they use EDNS0 which is an extension to the DNS protocol and allows larger DNS messages to be sent.

Hopefully this has cleared it up for you. If you've got any more questions feel free to PM me. 🤝

[liam270591]

Thank you very much for the detailed response. It's more than helpful man. I am going to purchase another dedicated server and set this up to give it a go. I am going to +rep you for being so helpful.

[Papa Cuda]

There's a list around here somewhere of IP ranges to avoid when scanning anything. I'll see if I can find it.

[liam270591]

There's a list around here somewhere of IP ranges to avoid when scanning anything. I'll see if I can find it.

Thank you mate. That would be very much appreciated.

[Papa Cuda]

I can't seem to find it but I'm sure if you look you will. Maybe someone else knows the thread link