DNS is a weird and fantastic protocol that lets any system on even the most secure networks talk to an evil system (aka me) without ever sending it a packet. Who wouldn’t love that? Every pentester needs to know how to leverage the DNS infrastructure to find vulnerabilities, exploit vulnerabilities- and even set up a discreet two-way channel. And if you’re a defender... well, maybe we’ll look at ways to defend against these attacks- too!

Back to Derbycon 2014 video list