[bzrΚ]

One of the most common things I see around here these days is people asking about DNS', what they are, how they work and arguing whether they're even worth using. This thread will hopefully clear up some of this confusion with a breakdown for each aspect.

Let's start from the top.

What does DNS stand for?

DNS stands for Domain Name System

What does a DNS actually do?

Think of a Domain Name System as a phonebook, but instead of phone numbers of local bussinesses and neighbours, they contain domain names that refer to IPs. E.g. Google's domain is http://google.co.uk but it's IP is 216.58.214.3

What's the point?

There are many use cases for a DNS, here are a few applicable cases for a DNS DOES.

• Make browsing the web much more user friendly
  
• Provide fall back for webservices if using multiple DNS' and one fails (multiple domains).
  
• Always calls back even if the IP changes
  
• Heavily used in e-mail and IM
  

However, a DNS DOES NOT.

• Provide any level of anonymity (!!!)
  
• Serve as a replacement for IP Addresses
  

So that's the very basics of a DNS. How does it work?

There are 3 main stages involved in the functioning of a DNS, starting from the first to the final destination, it looks a little like this:

1. Your computer asks for an address to http://example.com
   
   
2. You reach the DNS server and it tries to find the IP that the DNS belongs to. Should the first DNS server not find it it moves onto the next one and so forth until it (hopefully) finds the IP. This is also cached for x amount of time to speed up the process for future visitors.
   
   
3. The DNS server responds to you and sends back the IP, e.g. 216.58.214.3 (google.co.uk). Your machine then connects to that IP.
   

What place this has in the RATing community

The part of a DNS that is relevant in this scenario is using a DDNS, or Dynamic Domain Name Service, if you ask me it's a core tool that you should utilize properly. Not all IPs are static, and quite often they change regardless of if you're using a VPN or not. So below are some suggestions of some DNS' that I personally recommend, as well as some which you should never use.

The difference between DNS and DDNS is that an IP will automatically update in real-time, giving you fallback whenever the IP changes, your clients will redirect to the new IP, since they actually try to connect to yourdns.dns.com instead of an IP.

DNS examples I have tested and / or recommend:
DNS' listed here I have either used and recommend to others or I know are trust worthy and recommend to others.

• NameCheap's FreeDNS service
  https://www.namecheap.com/domains/freedns.aspx
  

- Offers free DNS services
- Uses a dedicated client
- Requires domain

---

• NameCheap domain
  https://www.namecheap.com/
  

- Offers free DNS services
- Uses a dedicated client (optional)
- Requires you to buy a NameCheap domain - typically $0.99

---

• NameCheap premiumDNS
  https://www.namecheap.com/security/premiumdns.aspx/
  

- Offers premiumDNS services at ~$5/year
- Uses a dedicated client (optional)

---

• Armada's Secure DNS Service
  https://hackforums.net/showthread.php?tid=4995393
  

- Offers a paid service
- Trustworthy
- Reliable

---

DNS examples I have not tested personally:
DNS' listed here I have NOT used but look fine to use.

• ChangeIP
  
• https://www.changeip.com/
  

- Offers freeDNS service

---

• DNSDynamic
  
• https://www.dnsdynamic.org/
  

- Offers freeDNS service

---

DNS' you should never use:
DNS' listed here you should not use under any circumstances.

• No-IP
  
• http://www.noip.com
  

- Owned by Microsoft and in collaboration with SpamHaus. These guys will shut you down.
- DO NOT USE.

---

• FreeDNS
  
• https://freedns.afraid.org
  

- Working with SpamHaus, actively block malicious domains.

---

• XName
  
• http://www.xname.org
  

- Working with SpamHaus, actively block malicious domains.

---

• DuckDNS
  
• https://www.duckdns.org/about.jsp
  

- Working with SpamHaus, actively block malicious domains.

---

• DynuDNS
  
• https://www.dynu.com
  

- Actively block malicious use

---

Will add more DNS to each category as I see fit.

How to setup your DNS?

The process for setting up a DNS varies very little from service to service. Should you need help setting one up Purple Kief's Mega-thread has an indepth guide on doing so: https://hackforums.net/showthread.php?tid=5327327

If you need any extra help please PM me for support.

[TheChiеf]

Seems like a pretty helpful thread for beginners to know about DNS and its use in RATs. 👍

[Purple Kief]

That's a very informative and well laid out thread.
Thank you homie. :)

[Armada]

Very well written thread man.
THanks for the recommendation as well. :-D

[GammaDune]

This is an awesome guide I've been in the market for a new DNS. How do you host a domain on the free DNS offered by Namecheap?

[bzrΚ]

Seems like a pretty helpful thread for beginners to know about DNS and its use in RATs. 👍

That's a very informative and well laid out thread.
Thank you homie. :)

Very well written thread man.
THanks for the recommendation as well. :-D

Thanks guys appreciate it

This is an awesome guide I've been in the market for a new DNS. How do you host a domain on the free DNS offered by Namecheap?

You don't host a domain. You buy one from them and name cheap has a built-in in set of tools on there site that allow you to set it up as a DNS service

[anonymous120]

Great thread vouch for you.

[VirtualMon3y]

Nice informative thread buddy. 🤝

[bzrΚ]

Great thread vouch for you.

Nice informative thread buddy. 🤝

Thanks guys :) Noticed a few adjustments /additions I can make and will add them soon.

Know a DNS I can add to this list? Let me know.

[Ace of Knaves]

This is absolutely brilliant. Thanks mate - appreciate this a ton. I'll go ahead and close my NO-IP tabs lol. I swear they were the ones to use when I last RAT'd but that was 5 years ago

[RastaManKing]

Very useful, thank you 🤝

[TheChiеf]

Just bumping this up for users to make use of this :)

[kevy42]

soo in other words.. dynudns is safe to use, dosnt honeypot?

[bzrΚ]

soo in other words.. dynudns is safe to use, dosnt honeypot?

As of right now, yes. Obviously the safest option will always be to do it yourself though

[kevy42]

As of right now, yes. Obviously the safest option will always be to do it yourself though

u mean like namecheap?