Jump to content

Welcome to NulledBlog
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. If you already have an account, login here - otherwise create an account for free today!
Photo

Mandiant Apatedns -Controlling Dns Responses Ineasy To Use Gui

Started By earlmur , Sep 12 2015 04:26 PM

  • Please log in to reply
3 replies to this topic

#1
earlmur
Posted 12 September 2015 - 04:26 PM

  • Offline

  • Advanced Member

  • PipPipPipPip
    • Posts:
    113
    Reputation:
    5
    Joined:
    06 Sep, 2015

Mandiant ApateDNS

Mandiant ApateDNS is a tool for controlling DNS responses though an easy to use GUI. As a phony DNS server, Mandiant ApateDNS spoofs DNS responses to a user-specified IP address by listening on UDP port 53 on the local machine. Mandiant ApateDNS also automatically sets the local DNS to localhost. Upon exiting the tool, it sets back the original local DNS settings.

Installation

  • Prerequisite: .Net framework ≥2

  • Link: http://www.mandiant....ts/ApateDNS.zip

  • Supported Operating Systems:

    • Windows 2000

    • Windows 2003

    • Windows XP

    • Windows 2008

    • Windows Vista

    • Windows 7 (32-bit and 64-bit)

Usage

21acrh3.png

  1. Use the DNS Reply IP field to either use the loopback address (127.0.0.1) or another DNS server.

  2. Click on the Start Server button

  3. The capture window on top will show DNS requests

  4. You can switch to the DNS Hex View tab to view the DNS request as hex, which might be convenient to analyze non-compliant DNS requests

  5. Click on the Stop Server button to stop the server.

You can track non-existing domains using the # of NXDOMAIN's field. It can be convenient to list still active domains in case of malware relying on multiple C&C's.


 


  • 0

#2
bewen01
Posted 12 September 2015 - 04:29 PM

  • Offline

  • New Member

    • Posts:
    23
    Reputation:
    0
    Joined:
    12 Sep, 2015

thanks you!


  • 0

#3
prezo111
Posted 17 September 2015 - 12:55 PM

  • Offline

  • Advanced Member

  • PipPipPipPip
    • Posts:
    81
    Reputation:
    11
    Joined:
    07 Aug, 2015

i reallly make my buissned thank you


  • 0

#4
BerkayBaykam
Posted 17 September 2015 - 05:19 PM

  • Offline

  • Member

  • PipPipPip
    • Posts:
    25
    Reputation:
    0
    Joined:
    17 Sep, 2015

very nice my friend 


  • 0
Back to Advanced Hacking

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. NulledBlog
  2. → Hacking
  3. → Advanced Hacking