Dotted Names
Hostnames may contain letters, numbers, or a few symbols. The dot character is normally used to separate hostname segments (hostname, domain, subdomain, etc.). For example, the hostname www.google.com contains the segments www, google, and com. If the hostname cannot be resolved, then the local domain is appended and the lookup is retried.
Anyone wanting to obscure a hostname can specify a name with a dot. For example, the domain test.lan may have the hostname www.google.com. A lookup of the hostname without the domain reveals the information for the host www in the google.com domain. However, a lookup with the domain, www.google.com.test. lan, resolves to a different system.
In this tutorial:
- Domain Name System (DNS)
- DNS Common Uses
- Hostname-to-Address Mapping
- Common Lookup Tools
- Naming Confusion Attack Vectors
- Dotted Names
- Name Formatting
- Exploited Anonymity
- Mail Servers
- Sender Policy Framework Overloading
- Domain Keys Overloading
- DNS Protocol
- Packet Information
- Simple DNS Server
- Distributed Architecture
- Top Level Domain Servers
- Generic Top Level Domain (gTLD)
- Secondary Level Domain (SLD)
- Primary and Secondary Servers
- Caching Servers
- DNS Management
- DNS Direct Risks
- DNS Performance versus Security
- DNS Cache Poisoning
- Corrupt DNS Packets
- DNS Domain Hijacking
- DNS Server Hijacking
- Dynamic DNS
- Similar Hostnames
- Domain Renewals
- Hostnames
- Zone Transfers
- Host Listing
- DNS Fields
- Mitgation Option
- Technical Threat Mitigation
- Social Threat Mitigation
- Defining Trusted Replies