A vulnerable DNS environment designed to understand how DNS works, how attackers abuse it and how defenders can detect & mitigate DNS-based attacks. Yes, that's a "53" in there — DN53CLab, pronounced "DNSecLab", because Port 53 is where all the fun happens.
DN53CLab is a self-built cybersecurity laboratory focused on learning DNS from both the administrator's and attacker's perspective.
Unlike traditional DNS tutorials, this project demonstrates:
🔹 How DNS actually works
🔹 Recursive vs Authoritative DNS
🔹 Zone Files
🔹 DNS Record Types
🔹 DNS Resolution Process
🔹 DNS Security Concepts
🔹 How DNS is Configured
🔹 Common DNS Misconfigurations
🔹 Real-world DNS Pentesting Techniques
🔹 Defensive Mitigations.
The goal is to build a strong understanding of DNS while safely demonstrating common attack techniques inside an isolated lab environment.
Warning
This project is built ONLY for educational purposes inside an isolated virtual lab.
No techniques demonstrated here should ever be used against systems without explicit authorization.
- Learn DNS from scratch
- Understand how recursive resolution works
- Configure authoritative DNS servers
- Host a website using custom DNS
- Perform DNS enumeration
- Identify DNS misconfigurations
- Demonstrate common DNS attacks
- Learn practical mitigation techniques
┌─────────────────────┐ ──────────────────────────────────────────┐
│NAT (192.168.34.0/24 │ │
└─────────────────────┘ │
│ │
│ H4CK3R [KALI LINUX] Victim [Windows 10] │
│ (192.168.34.129) (192.168.34.130) │
│ │ │ │
│ └───────────────────┬─────────────────────┘ │
│ │ │
│ ▼ │
│ DNS Resolver │
│ [Ubuntu Server 26.04 LTS] │
│ (192.168.34.131) │
│ │ │
│ │ │
│ ▼ │
│ Authoritative Server │
│ [Ubuntu Server 26.04 LTS] │
│ (192.168.34.133) │
│ │ │
│ │ │
│ ▼ │
│ Webserver │
│ [Ubuntu Server 26.04 minimized] │
│ (192.168.34.134) │
│ │
└─────────────────────────────────────────────────────────────────┘
- DNS Core Concepts
- DNS Record Types
- The Resolution Process
- Root Servers
- TLD Servers
- Recursive Resolver
- Authoritative DNS
- DNS Cache
- TTL
- Zone Files
- DNS Security Weaknesses
- DNS Attacks
| Component | Technology |
|---|---|
| DNS Server | BIND9 |
| Web Server | Nginx |
| Operating System | Ubuntu Server |
| Virtualization | VMware Workstation |
| Attacker Machine | Kali Linux |
| Victim Machine | Windows 10 |
- DNS Enumeration
- Subdomain Enumeration
- Record Enumeration
- Zone Transfer (AXFR)
- Open Recursive Resolver
- DNS Cache Inspection
- Weak DNS Configuration
- DNS Enumeration & Reconnaissanc
- DNS Amplification (Controlled Demonstration)
- DNS Zone transfer
- Dynamic DNS Update
- DNS Hijacking Concepts
- Restrict Zone Transfers
- Disable Open Recursion
- Response Rate Limiting (RRL)
- DNSSEC Overview
- Logging & Monitoring
- Least Privilege Configuration
DN53CLab/
├── Documentation/
│ ├── DNS Fundamentals
│ ├── DNS Attacks
│ └── Configuration/
│ ├── Network Configuration
│ ├── DNS Resolver/
│ │ ├── Open DNS Resolver Configuration
│ │ └── Multiple Bind9 Instance Configuration
│ ├── Authoritative Server/
│ │ └── Authoritative Server Configuration
│ ├── Webserver/
│ │ └── Webserver Configuration
│ ├── Victim_Machine/
│ │ └── Windows 10 Configuration
│ ├── Attacker_Machine/
│ │ └── Kali Linux Configuration
│ └── Malicious Server Configuration
│
├── Inventory/
│ ├── Diagrams
│ └── Screenshots
│
├── Report/
│ ├── DNS Reconnaisance & Enumeration
│ ├── DNS Zone Transfer
│ ├── DNS Amplification Attack
│ ├── Dynamic DNS Update (DDNS)
│ ├── DNS Hijacking
│ └── Mitigations
│
└── README.md
By completing this lab you will understand:
✅ How DNS works internally
✅ How recursive and authoritative servers interact
✅ How websites are resolved
✅ How attackers enumerate DNS
✅ How DNS misconfigurations occur
✅ How common DNS attacks work
✅ How organizations secure DNS infrastructure
- DNSSEC Implementation
- Split DNS
- Response Rate Limiting
- Passive DNS Monitoring
- DNS Logging Dashboard
- Additional Attack Scenarios
- Detection Engineering
- Blue Team Monitoring
Suggestions and improvements are always welcome.
Feel free to:
- Open an Issue
- Submit a Pull Request
- Share feedback
This project is licensed under the Apache License 2.0.
You are welcome to use, study, modify, and redistribute this project in accordance with the license terms. If you create derivative works, please retain the original copyright notice, include the Apache License 2.0, and clearly indicate any modifications.
See the LICENSE file for full details.
Incogn1mu5