Test ID:	1.3.6.1.4.1.25623.1.0.104033
Category:	Nmap NSE net
Title:	Nmap NSE net: dns-cache-snoop
Summary:	Performs DNS cache snooping against a DNS server.;;There are two modes of operation, controlled by the 'dns-cache-snoop.mode' script;argument. In 'nonrecursive' mode (the default), queries are sent to the server with the;RD (recursion desired) flag set to 0. The server should respond positively to these only if it has;the domain cached. In 'timed' mode, the mean and standard deviation response times for a;cached domain are calculated by sampling the resolution of a name (www.google.com) several times.;Then, each domain is resolved and the time taken compared to the mean. If it is less than one;standard deviation over the mean, it is considered cached. The 'timed' mode inserts;entries in the cache and can only be used reliably once.;;The default list of domains to check consists of the top 50 most popular sites, each site being;listed twice, once with 'www.' and once without. Use the 'dns-cache-snoop.domains' script;argument to use a different list.;;SYNTAX:;;dns-cache-snoop.domains: an array of domain to check in place of;the default list.;;dns-cache-snoop.mode: which of two supported snooping methods to;use. 'nonrecursive', the default, checks if the server;returns results for non-recursive queries. Some servers may disable;this. 'timed' measures the difference in time taken to;resolve cached and non-cached hosts. This mode will pollute the DNS;cache and can only be used once reliably.
Description:	Summary: Performs DNS cache snooping against a DNS server. There are two modes of operation, controlled by the 'dns-cache-snoop.mode' script argument. In 'nonrecursive' mode (the default), queries are sent to the server with the RD (recursion desired) flag set to 0. The server should respond positively to these only if it has the domain cached. In 'timed' mode, the mean and standard deviation response times for a cached domain are calculated by sampling the resolution of a name (www.google.com) several times. Then, each domain is resolved and the time taken compared to the mean. If it is less than one standard deviation over the mean, it is considered cached. The 'timed' mode inserts entries in the cache and can only be used reliably once. The default list of domains to check consists of the top 50 most popular sites, each site being listed twice, once with 'www.' and once without. Use the 'dns-cache-snoop.domains' script argument to use a different list. SYNTAX: dns-cache-snoop.domains: an array of domain to check in place of the default list. dns-cache-snoop.mode: which of two supported snooping methods to use. 'nonrecursive', the default, checks if the server returns results for non-recursive queries. Some servers may disable this. 'timed' measures the difference in time taken to resolve cached and non-cached hosts. This mode will pollute the DNS cache and can only be used once reliably. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2011 NSE-Script: The Nmap Security Scanner; NASL-Wrapper: Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.