Exploiting Microsoft DNS Dynamic Updates for Fun and profit

milw0rm.com — By default, most Microsoft DNS servers integrated with active directory allowinsecure dynamic updates for dns records.This feature allows remote users to create, change and delete DNS records.There are several attack scenarios:You ARE using Microsoft for you DNS right? NOT!!! Apr 2, 2007 View in Crawl 4