Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DNS request not received when mixed case query is used #434

Open
ndmalc opened this issue Jan 14, 2023 · 0 comments
Open

DNS request not received when mixed case query is used #434

ndmalc opened this issue Jan 14, 2023 · 0 comments
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.

Comments

@ndmalc
Copy link

ndmalc commented Jan 14, 2023

Interactsh version:

web (app.interactsh.com) using oast.fun
interactsh-client (v1.0.7) using oast.fun

Current Behavior:

No DNS request are received from interactsh client when DNS request are performed from specific DNS servers. I identified that said server is performing mixed case dns query. HTTP request are properly received on the other hand.

Expected Behavior:

DNS query are received by the interactsh client.

Steps To Reproduce:

  1. Get interactsh token
  2. Make one or more letter of base domain (usually TLD/TLD+1) uppercase
  3. Do command 'dig @ns1.<base_domain> <uppercase_token>' ex: dig @ns1.oast.fun cf08e2g2Vtc0000T9v70g8osydoyYyyyJ.Oast.fun
  4. Never receive DNS request from the client

Anything else:

Talk of mixed case dns query: https://isc.sans.edu/diary/Use+of+Mixed+Case+DNS+Queries/12418
Upper case letter in the random part of the token does not create any issue only the domain part

@ndmalc ndmalc added the Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors. label Jan 14, 2023
@ehsandeep ehsandeep reopened this Feb 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Projects
None yet
Development

No branches or pull requests

2 participants