Skip to content

Access Control: Unauthenticated DNS Dynamic Update

Identifier: dns_unauthenticated_dynamic_update

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

DNS servers that accept unauthenticated dynamic updates can allow attackers to create or replace records in a zone.

How we test: We attempt a controlled dynamic DNS update against the target zone and report the issue when the server accepts the unauthenticated update.

Configuration

Example

Example configuration:

---
security_tests:
  dns_unauthenticated_dynamic_update:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.