🔏
roguebook
  • group
    • Web
      • Concepts
      • OAuth 2.0
      • File upload
      • API testing
      • Web Cache Decpetion
      • CORS
      • CSRF
      • Cross site web socket hijacking
      • XS-Leaks
    • Bug Bounty
      • Recon
        • Dorking
          • SSL Checker
        • Wordlists
          • Twitter wordlist suggestions
      • Tips & Tricks
        • Combined
        • CSP Bypasses & open redirect
        • 403 Bypass
        • Arrays in JSON
        • Open Redirect
        • Next.js Application
        • Locla File Read
        • External Link
        • xss bypass
        • CSRF cors bypass
        • ssrf
      • Talks/Interviews/Podcasts
        • Bug Bounty Talks
        • Podcasts
          • Critical Thinking - Bug Bounty Podcast
            • Learning
      • Tools
    • Android
      • Getting Started
      • Intent Attack Surface
      • Broadcast Receivers
      • Android Permissions
      • Android Services
      • Content and FileProvider
      • WebView & CustomTabs
      • Insecure Storage
      • Tips & Tricks
    • Thick Client
      • Lab Setup
      • Information Gathering
      • Traffic analysis
      • Insecure Data storage
      • Input validation
      • DLL hijacking
      • Forensics
      • Extra resources
    • OSINT
      • OpSec
    • Malware Analysis
      • Lab Setup
      • Networking
      • Tools
      • Malware source
      • Basic Static Analysis
      • Basic Dynamic Analysis
      • Advanced Analysis
      • Advanced Static Analysis
      • Advanced Dynamic Analysis
      • Malicious Document Analysis
      • Shellcode Analysis
    • Malware Development
    • Blue Team
      • Tools
      • Malware Analysis
        • Basic Static Analysis
    • Assembly
      • Instructions
    • Binary Exploitation
    • Infographics
    • Malware Analysis
    • Threat Modeling
Powered by GitBook
On this page
  1. group
  2. Web

Concepts

PreviousWebNextOAuth 2.0

Last updated 19 days ago

How DNS resolution work ?

  1. Domain Name Resolution: When you type a domain name into your web browser (e.g., "example.com"), your computer needs to know the corresponding IP address of the server hosting that website.

  2. Querying Nameservers: Your computer sends a request to a DNS resolver (usually provided by your internet service provider or configured in your network settings) asking for the IP address associated with the domain name.

  3. Root Nameservers: If the resolver doesn't already know the IP address for the domain, it contacts a root nameserver. The root nameservers contain information about the top-level domain (TLD) servers for every domain extension (like .com, .net, .org, etc.).

  4. TLD Nameservers: The root nameserver directs the resolver to the appropriate TLD nameserver based on the domain's extension. For example, if the domain is "example.com," the resolver is directed to the .com TLD nameserver.

  5. Authoritative Nameservers: The TLD nameserver then directs the resolver to the authoritative nameservers for the specific domain (e.g., "example.com"). These authoritative nameservers are designated by the domain owner and contain the DNS records for that domain.

Note: Meaning owner has specified which server has authority for storing DNS records for their domain.(Adding NS records when setting up Website).

SO TLD server will (.com in this case) will add new NS records to ts zone files. that for example.com which server(NS records) have authority to hold DNS records. Then that Authrotative Nameserver will provide DNS record in next step.

  1. DNS Records: The authoritative nameservers provide the resolver with the necessary DNS records, such as A records (which map domain names to IP addresses), MX records (which specify mail servers for the domain), CNAME records (which provide aliases for domain names), and more.

  2. Response: The resolver receives the DNS records from the authoritative nameservers and returns the IP address to the requesting device.

  3. Caching: To improve efficiency and reduce network traffic, DNS resolvers typically cache the DNS records they receive for a certain period. This caching helps speed up future requests for the same domain.

2, samesite vs sameorigin

LogoThe great SameSite confusion