DNSSECTION: A practical attack on DNSSEC Zone Walking

Presented at DEF CON 28 (2020) Virtual, Aug. 6, 2020, 11:30 a.m. (30 minutes)

Domain Name System (DNS) is an ubiquitous and essential component of the Internet. It performs translations between identifiers and resources (mostly domain names and computers, but not only), yet remains often invisible to the user. But DNS is not harmless: although not intended to be a general purpose database, it has been extended to incorporate additional types of information. Including information that should not be there. In this talk we show how to exploit DNSSEC zone walking to perform advanced recon operations, on a real case, namely to obtain client private information from a large European cloud provider. This constitutes the first practical zone walking attack at such a scale. Using this exploit we collected a substantial amount of private information, enough to share some interesting statistics. By the end of this talk, you will have everything you need to know to perform similar attacks -- and resist them.

Presenters:

• Rémi Géraud-Stewart - Hacker
  Rémi Géraud-Stewart is a cryptologist and security expert with École Normale Supérieure in Paris, focusing on intrusion and cyberwarfare.
• Hadrien Barral - Hacker
  Hadrien Barral Hadrien Barral is an R&D engineer, focusing on security and high-assurance software. He enjoys hacking on exotic hardware.

Links:

• https://defcon.org/html/defcon-safemode/dc-safemode-speakers.html#Barral
• https://infocon.org/cons/DEF CON/DEF CON 28/DEF CON Safe Mode video and slides/DEF CON Safe Mode - Hadrien Barral and Rémi Géraud-Stewart - DNSSECTION - A practical attack on DNSSEC Zone Walking - Q&A.mp4
• https://infocon.org/cons/DEF CON/DEF CON 28/DEF CON Safe Mode video and slides/DEF CON Safe Mode - Hadrien Barral and Rémi Géraud-Stewart - DNSSECTION - A practical attack on DNSSEC Zone Walking.mp4
• https://infocon.org/cons/DEF CON/DEF CON 28/DEF CON Safe Mode video and slides/DEF CON Safe Mode - Hadrien Barral and Rémi Géraud-Stewart - DNSSECTION - A practical attack on DNSSEC Zone Walking.srt (subtitles)
• https://www.youtube.com/watch?v=q1cnsIM1w7c

Similar Presentations:

• DerbyCon 6.0 Recharge (2016) / DNSSUX: Why DNSSEC Makes Us Weaker