Module: Msf::Exploit::Remote::DNS

Defined in:

lib/msf/core/exploit/remote/dns.rb,
lib/msf/core/exploit/remote/dns/client.rb,
lib/msf/core/exploit/remote/dns/common.rb,
lib/msf/core/exploit/remote/dns/server.rb,
lib/msf/core/exploit/remote/dns/enumeration.rb,
lib/msf/core/exploit/remote/dns/name_poisoner.rb

Overview

This mixin adds selective DNS name poisoning on top of Exploit::Remote::DNS::Server.

A module that also includes DNS::Server can mix this in to answer lookups for names under a target scope with the attacker's address (or a CNAME), while transparently forwarding every out-of-scope query so the victim stays functional. It is the shared coercion behaviour behind the IPv6 DNS-takeover modules (rogue DHCPv6 and rogue Router Advertisement), paired with a Kerberos relay target such as ESC8 AD CS web enrollment (CVE-2026-20929).

Defined Under Namespace

Modules: Client, Common, Enumeration, NamePoisoner, Server