Скачать или смотреть A New Class of DNS Vulnerabilities Affecting Many DNS-as-Service Platforms

We present a novel class of DNS vulnerabilities that affect multiple DNS-as-a-Service (DNSaaS) providers. The vulnerabilities have been proven and successfully exploited on three major cloud providers including AWS Route 53 and may affect many others. Successful exploitation of the vulnerabilities may allow exfiltration of sensitive information from service customers' corporate networks. The leaked information contains internal and external IP addresses, computer names, and sometimes NTLM / Kerberos tickets. The root cause of the problem is the non-standard implementation of DNS resolvers that, when coupled with specific unintended edge cases on the DNS service provider's side, cause major information leakage from internal corporate networks.

In this research, we detail a specific vulnerability that is common across many major DNS service providers that leads to information leakage in connected corporate networks...

By: Shir Tamari & Ami Luttwak

Full Abstract & Presentation Materials:
https://www.blackhat.com/us-21/briefi...