Unverified50% confidenceFactExact time
By traditional design, DNS queries are plaintext and unauthenticated, and intermediary devices can preemptively return forged addresses, achieving DNS pollution and hijacking.
1
Sources
50%
Confidence
Long-term
Relevance
10/25/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedDNS hijacking refers to attackers tampering with DNS resolution results to redirect users' access to legitimate websites toward malicious servers76% similarUnverifiedDNS queries can encode arbitrary data in TXT records or subdomains, making them a covert communication channel—a technique that has long been documented in APT attacks.74% similarUnverified子域名发现的技术手段包括DNS字典爆破和证书透明度日志查询，常用工具有subfinder、amass和OneForAll73% similarVerifiedDNS Rebinding is an attack technique that exploits the DNS resolution time gap to bypass the same-origin policy by setting the DNS TTL to an extremely short value so that the domain resolves to 127.0.0.1 after the page has loaded.72% similarUnverifiedMalware typically does not hard-code IP addresses, but instead locates C2 servers through domain name resolution to enable rapid switching after an IP is blocked; the related techniques are known as Fast Flux or Domain Generation Algorithms (DGA).72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1097679API
curl https://kongchang.com/api/v1/knowledge/claims/1097679MCP
get_claim(id=1097679)