DNS & DHCP Pentesting Playbook

Network protocol attacks that most pentesters overlook — covered in full detail. DNS attack techniques: • Enumeration — zone transfers (AXFR), subdomain brute-forcing, PTR record mapping • DNS spoofing & cache poisoning — Responder, DNSchef, targeted poisoning attacks • DNS tunneling — data exfiltration over DNS, C2 channel setup with Iodine/DNScat2 • Subdomain takeover — dangling CNAME detection and exploitation • Internal DNS abuse — AD DNS enumeration, wildcard record exploitation DHCP attack techniques: • DHCP starvation — exhausting the IP pool with Yersinia, Gobbler • Rogue DHCP server — default gateway hijacking, DNS redirection for MITM • DHCP snooping bypass — evading network-layer defenses • IPv6 DHCP attacks — DHCPv6 rogue server, mitm6 for Active Directory attacks Essential reading for internal network assessments and Active Directory attack chains.