Skip to content

Commit

Permalink
Updated Blogpost Link
Browse files Browse the repository at this point in the history
  • Loading branch information
The-Login authored Jun 13, 2023
1 parent 3e713c2 commit 4f5298d
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions src/DNSAnalysisUtils.java
Original file line number Diff line number Diff line change
Expand Up @@ -337,7 +337,7 @@ public static class DNSAnalysisRating {
<h1>DNS Analyzer</h1>
<i>A Burp extension for discovering DNS vulnerabilities in web applications!</i>
<h2>Howto</h2>
You can find an in-depth guide <a href="https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite/">here</a>, which boils down to the following steps:
You can find an in-depth guide <a href="https://r.sec-consult.com/dnsburp">here</a>, which boils down to the following steps:
<ol>
<li>Click "Copy to Clipboard" to generate and copy a Burp Collaborator domain</li>
<li>Get something to resolve the generated domain via DNS. For example, by using it:</li>
Expand Down Expand Up @@ -399,7 +399,7 @@ This analysis is done for DNS messages of all selected resolver IPs at once ("Al
</ol>
Essentially, <b>don't flood bug bounty programs with DNS vulnerability reports without doing proper research first!</b>
<h2>Further Info</h2>
As already mentioned, you can find a full DNS Analyzer guide <a href="https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite/">here</a>.<br>
As already mentioned, you can find a full DNS Analyzer guide <a href="https://r.sec-consult.com/dnsburp">here</a>.<br>
Also, you can find further information about DNS analysis and DNS vulnerabilities in the following blog posts:
<ul>
<li><a href="https://sec-consult.com/blog/detail/forgot-password-taking-over-user-accounts-kaminsky-style/">First blog post</a> showing the basics of DNS analysis in web applications</li>
Expand Down

0 comments on commit 4f5298d

Please sign in to comment.