Exploitation

ADIDNS Poisoning and Hijacking

Exploit Active Directory DNS zones by injecting wildcard records and hijacking ADIDNS to redirect traffic or capture credentials in AD environments.

DNS Cache Poisoning and Spoofing

DNS Rebinding – Bypass SOP to Reach Internal Services

Insecure DNS Dynamic Updates (RFC 2136)

Subdomain Takeover Exploitation

TSIG Key Abuse – Authenticated DNS Zone Manipulation

WPAD DNS Credential Capture with Responder

Exploit WPAD misconfiguration using Responder to poison DNS, intercept proxy auto-discovery requests, and capture NTLMv2 credentials from Windows hosts.