Packet Tuesday - Punycode Encoding DNS
In this episode of Packet Tuesday we analyze a DNS feature.
Each Tuesday Dr. Johannes Ullrich will cover a specific network feature by analyzing a packet to help you better understand networks and network traffic.
Notes:
SEC503 Network Monitoring and Threat Detection In-Depth: https://www.sans.org/u/1obN
Packets: https://packettuesday.com/packets/episode1
OpenSSL Vulnerablity: https://isc.sans.edu/diary/Critical%20OpenSSL%203.0%20Update%20Released.%20Patches%20CVE-2022-3786%2C%20CVE-2022-3602/29208
TCP/IP Cheatsheets (nice to have while watching): https://www.sans.org/posters/tcp-ip-and-tcpdump/
RFCs:
https://www.rfc-editor.org/rfc/rfc1034 Domain Name Concepts
https://www.rfc-editor.org/rfc/rfc1035 DOMAIN NAMES - IMPLEMENTATION AND SPECIFICATIO
https://www.rfc-editor.org/rfc/rfc1101 DNS Encoding
https://www.rfc-editor.org/rfc/rfc3492 Punycode
Feedback:
https://isc.sans.edu/contact.html
jullrich@sans.edu