A lightly-moderated mailing list for the discussion of security issues

Jardel | 25 Jun 2012 20:06

How to access your favorite sites in the event of a DNS takedown ?

Do you know? Even in DNS take down you can youcan access your favourite sites. 

People may think that in DNS shoutdown they can lost access to their addicted websites.

But after reading this article you will know how easily you can access your websites. You can access them by
typing their IP address in your web-browser.

Copy the IP addresses given below:

tumblr.com 174.121.194.34
wikipedia.org 208.80.152.201

Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

alan buxey | 25 Jun 2012 20:28

Re: How to access your favorite sites in the event of a DNS takedown ?

Hi,

> But after reading this article you will know how easily you can access your websites. You can access them by
typing their IP address in your web-browser.
> 
> Copy the IP addresses given below:
> 
> tumblr.com 174.121.194.34
> wikipedia.org 208.80.152.201

partially true and not always the case. the servers may be co-hosted and if reached via IP address you wouldnt
be handled by the virtual hosting redirection and therefore drop onto some other
site/service/catch-all... same is true if
you use alternatives to the old IPv4 - for example, I prefer to access www.wikipedia.org via 2620:0:862:ed1a::1

alan

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Jardel Weyrich | 25 Jun 2012 20:49

Re: How to access your favorite sites in the event of a DNS takedown ?

And you're trying to impersonate someone by using my email address as
sender? I don't get it.

Received: from emkei.cz (emkei.cz [46.167.245.118])
	by lists.grok.org.uk (Postfix) with ESMTP id BBB2CCB
	for <full-disclosure <at> lists.grok.org.uk>;
	Mon, 25 Jun 2012 19:14:27 +0100 (BST)
Received: by emkei.cz (Postfix, from userid 33)
	id BC04FD58DA; Mon, 25 Jun 2012 20:06:43 +0200 (CEST)
To: full-disclosure <at> lists.grok.org.uk
From: "Jardel" <jweyrich <at> gmail.com>

-- jardel

On Mon, Jun 25, 2012 at 3:06 PM, Jardel <jweyrich <at> gmail.com> wrote:
> Do you know? Even in DNS take down you can youcan access your favourite sites.
>
> People may think that in DNS shoutdown they can lost access to their addicted websites.
>
>
> But after reading this article you will know how easily you can access your websites. You can access them by
typing their IP address in your web-browser.
>
> Copy the IP addresses given below:
>
> tumblr.com 174.121.194.34
> wikipedia.org 208.80.152.201
>
> Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>

(Continue reading)

headers

Peter Dawson | 25 Jun 2012 21:05

Re: How to access your favorite sites in the event of a DNS takedown ?

quick quick ....nuke the co-ord [ 49°28'14" North | 16°56'48" East ]

On Mon, Jun 25, 2012 at 2:49 PM, Jardel Weyrich <jweyrich <at> gmail.com> wrote:

And you're trying to impersonate someone by using my email address as
sender? I don't get it.

Received: from emkei.cz (emkei.cz [46.167.245.118])
by lists.grok.org.uk (Postfix) with ESMTP id BBB2CCB
for <full-disclosure <at> lists.grok.org.uk>;
Mon, 25 Jun 2012 19:14:27 +0100 (BST)
Received: by emkei.cz (Postfix, from userid 33)
id BC04FD58DA; Mon, 25 Jun 2012 20:06:43 +0200 (CEST)
To: full-disclosure <at> lists.grok.org.uk
From: "Jardel" <jweyrich <at> gmail.com>

-- jardel

On Mon, Jun 25, 2012 at 3:06 PM, Jardel <jweyrich <at> gmail.com> wrote:
> Do you know? Even in DNS take down you can youcan access your favourite sites.
>
> People may think that in DNS shoutdown they can lost access to their addicted websites.
>
>
> But after reading this article you will know how easily you can access your websites. You can access them by typing their IP address in your web-browser.
>
> Copy the IP addresses given below:
>
> tumblr.com 174.121.194.34
> wikipedia.org 208.80.152.201
>
> Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Darius Jahandarie | 25 Jun 2012 21:14

Re: How to access your favorite sites in the event of a DNS takedown ?

On Mon, Jun 25, 2012 at 2:49 PM, Jardel Weyrich <jweyrich <at> gmail.com> wrote:
> And you're trying to impersonate someone by using my email address as
> sender? I don't get it.

If you're whitelisted on full-disclosure, perhaps your email address
was used to get past the moderation queue to post some spam (which is
what this looks like).

I'm not exactly sure how full-disclosure's moderation/whitelisting
works, but this sounds possible to me.

--

-- 
Darius Jahandarie

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

nake | 25 Jun 2012 21:32

Re: How to access your favorite sites in the event of a DNS takedown ?


Lol, in fact, if you search that IP in DuckDuckGo one of the first
results is a tutorial about how to "fake" your email address:
http://howdysam.info/2012/05/how-to-sent-the-fake-mail-to-any-email-id-via-any-email-id/

And the most fun part is that in the example it literally says:
Received: from emkei.cz (emkei.cz. [46.167.245.118])

On 25/06/2012 20:49, Jardel Weyrich wrote:
> And you're trying to impersonate someone by using my email address
> as sender? I don't get it.
> 
> Received: from emkei.cz (emkei.cz [46.167.245.118]) by
> lists.grok.org.uk (Postfix) with ESMTP id BBB2CCB for
> <full-disclosure <at> lists.grok.org.uk>; Mon, 25 Jun 2012 19:14:27
> +0100 (BST) Received: by emkei.cz (Postfix, from userid 33) id
> BC04FD58DA; Mon, 25 Jun 2012 20:06:43 +0200 (CEST) To:
> full-disclosure <at> lists.grok.org.uk From: "Jardel"
> <jweyrich <at> gmail.com>
> 
> -- jardel
> 
> On Mon, Jun 25, 2012 at 3:06 PM, Jardel <jweyrich <at> gmail.com>
> wrote:
>> Do you know? Even in DNS take down you can youcan access your
>> favourite sites.
>> 
>> People may think that in DNS shoutdown they can lost access to
>> their addicted websites.
>> 
>> 
>> But after reading this article you will know how easily you can
>> access your websites. You can access them by typing their IP
>> address in your web-browser.
>> 
>> Copy the IP addresses given below:
>> 
>> tumblr.com 174.121.194.34 wikipedia.org 208.80.152.201
>> 
>> Original
>> Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>>
>>
>> 
_______________________________________________
>> Full-Disclosure - We believe in it. Charter:
>> http://lists.grok.org.uk/full-disclosure-charter.html Hosted and
>> sponsored by Secunia - http://secunia.com/
> 
> _______________________________________________ Full-Disclosure -
> We believe in it. Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html Hosted and
> sponsored by Secunia - http://secunia.com/
>

headers

nake | 25 Jun 2012 20:36

Re: How to access your favorite sites in the event of a DNS takedown ?

Is that so? As far as I know if the host has multiple websites you
need more info than just the IP. For example, my webpage
(nakerium.com) is in a shared hosting.
If I ping it it says that its IP is: 159.253.149.218
However, if I just enter that IP in my browser it just shows a random
page from my host because the server doesn't know what webpage I want
to see.
In order to see my webpage I need to enter
http://159.253.149.218/~nakerium

Most of the times it should be straightforward to add the
"/~websitename" but it depend on how the host has defined their server.

On 25/06/2012 20:06, Jardel wrote:
> Do you know? Even in DNS take down you can youcan access your 
> favourite sites.
> 
> People may think that in DNS shoutdown they can lost access to 
> their addicted websites.
> 
> 
> But after reading this article you will know how easily you can 
> access your websites. You can access them by typing their IP 
> address in your web-browser.
> 
> Copy the IP addresses given below:
> 
> tumblr.com 174.121.194.34 wikipedia.org 208.80.152.201
> 
> Original 
> Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>
>
>
> 
_______________________________________________ Full-Disclosure -
> We believe in it. Charter: 
> http://lists.grok.org.uk/full-disclosure-charter.html Hosted and 
> sponsored by Secunia - http://secunia.com/
>

headers

Nate Theis | 25 Jun 2012 21:27

Re: How to access your favorite sites in the event of a DNS takedown ?

And don't forget

lists.grok.org.uk 127.0.0.1

On Jun 25, 2012 11:15 AM, "Jardel" <jweyrich <at> gmail.com> wrote:

Do you know? Even in DNS take down you can youcan access your favourite sites.

People may think that in DNS shoutdown they can lost access to their addicted websites.

But after reading this article you will know how easily you can access your websites. You can access them by typing their IP address in your web-browser.

Copy the IP addresses given below:

tumblr.com 174.121.194.34
wikipedia.org 208.80.152.201

Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Thor (Hammer of God | 25 Jun 2012 21:32

Re: How to access your favorite sites in the event of a DNS takedown ?

What, no one uses the HOSTS file anymore?

Timothy “Thor” Mullen

www.hammerofgod.com

Thor’s Microsoft Security Bible

From: full-disclosure-bounces <at> lists.grok.org.uk [mailto:full-disclosure-bounces <at> lists.grok.org.uk] On Behalf Of Nate Theis
Sent: Monday, June 25, 2012 12:28 PM
To: jweyrich <at> gmail.com
Cc: full-disclosure <at> lists.grok.org.uk
Subject: Re: [Full-disclosure] How to access your favorite sites in the event of a DNS takedown ?

And don't forget

lists.grok.org.uk 127.0.0.1

On Jun 25, 2012 11:15 AM, "Jardel" <jweyrich <at> gmail.com> wrote:

Do you know? Even in DNS take down you can youcan access your favourite sites.

People may think that in DNS shoutdown they can lost access to their addicted websites.

But after reading this article you will know how easily you can access your websites. You can access them by typing their IP address in your web-browser.

Copy the IP addresses given below:

tumblr.com 174.121.194.34
wikipedia.org 208.80.152.201

Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Nahuel Grisolía | 25 Jun 2012 21:32

Re: How to access your favorite sites in the event of a DNS takedown ?

And of course: HTTPS://2915183139

On 25 June 2012 16:27, Nate Theis <nttheis <at> gmail.com> wrote:
> And don't forget
>
> lists.grok.org.uk 127.0.0.1
>
> On Jun 25, 2012 11:15 AM, "Jardel" <jweyrich <at> gmail.com> wrote:
>>
>> Do you know? Even in DNS take down you can youcan access your favourite
>> sites.
>>
>> People may think that in DNS shoutdown they can lost access to their
>> addicted websites.
>>
>>
>> But after reading this article you will know how easily you can access
>> your websites. You can access them by typing their IP address in your
>> web-browser.
>>
>> Copy the IP addresses given below:
>>
>> tumblr.com 174.121.194.34
>> wikipedia.org 208.80.152.201
>>
>> Original
>> Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

nix | 25 Jun 2012 21:44

Re: How to access your favorite sites in the event of a DNS takedown ?

> Do you know? Even in DNS take down you can youcan access your favourite
> sites.
>
> People may think that in DNS shoutdown they can lost access to their
> addicted websites.
>
>
> But after reading this article you will know how easily you can access
> your websites. You can access them by typing their IP address in your
> web-browser.
>
> Copy the IP addresses given below:
>
> tumblr.com 174.121.194.34
> wikipedia.org 208.80.152.201

Is this post some kind of joke? Anyone who have played even a bit with web
servers know this. In the event of DNS takedown your site is pretty much
done. I don't think so regular visitors track down site IP's and visit it
again when it 'disappears' ...

>
> Original
> Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

rancor | 25 Jun 2012 22:17

Re: How to access your favorite sites in the event of a DNS takedown ?

I like this thread =) kind of the surf'aholic disaster plan for idiots and it's amusing in its own sad way

On Jun 25, 2012 9:52 PM, <nix <at> myproxylists.com> wrote:

> Do you know? Even in DNS take down you can youcan access your favourite
> sites.
>
> People may think that in DNS shoutdown they can lost access to their
> addicted websites.
>
>
> But after reading this article you will know how easily you can access
> your websites. You can access them by typing their IP address in your
> web-browser.
>
> Copy the IP addresses given below:
>
> tumblr.com 174.121.194.34
> wikipedia.org 208.80.152.201

Is this post some kind of joke? Anyone who have played even a bit with web
servers know this. In the event of DNS takedown your site is pretty much
done. I don't think so regular visitors track down site IP's and visit it
again when it 'disappears' ...

>
> Original
> Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

PsychoBilly | 26 Jun 2012 15:00

Re: How to access your favorite sites in the event of a DNS takedown ?

[[   nix <at> myproxylists.com   ]]  <at>  [[   25/06/2012 21:44   ]]--------------------------------------------------
> Is this post some kind of joke?

More like a G.bombing or social engeneering trick, as every oned-post blog.
you clicked, you lost time, then you'll want to subs to https://twitter.com/#!/username for more

more fun here: http://3494942921

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Brian Gallagher | 26 Jun 2012 16:45

Re: How to access your favorite sites in the event of a DNS takedown ?

As has been stated, this won't work on co-hosted sites.

The more reliable way to do this is to fake the DNS on your own machine by adding the IP address to the HOSTS file (/etc/hosts on UNIX/Linux/Mac, C:\Windows\System32\Drivers\Etc\hosts on most Windows boxes):

# Comment describing why you're doing this
# Format is: IPAddress list of DNS names or aliases
# DNS is down, get to my sites anyway
88.80.2.33 wikileaks.org www.wikileaks.org
174.121.194.34 tumblr.com www.tumblr.com
208.80.152.201 wikipedia.com www.wikipedia.com
123.34.56.78 othersite.com alias.othtersite.com

- Brian

On Mon, Jun 25, 2012 at 2:06 PM, Jardel <jweyrich <at> gmail.com> wrote:

Do you know? Even in DNS take down you can youcan access your favourite sites.

People may think that in DNS shoutdown they can lost access to their addicted websites.

But after reading this article you will know how easily you can access your websites. You can access them by typing their IP address in your web-browser.

Copy the IP addresses given below:

tumblr.com 174.121.194.34
wikipedia.org 208.80.152.201

Original Article:http://cybermughal.blogspot.com/2012/06/how-to-access-your-favorite-sites-in.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

--
Brian Gallagher - Diamondsea.com / VirtCert.com - 800-604-1476
brian <at> diamondsea.com - 888-411-8144 Fax - www.DiamondSea.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Michael Stummvoll | 27 Jun 2012 13:24

Re: How to access your favorite sites in the event of a DNS takedown ?

Hi,

> Do you know? Even in DNS take down you can youcan access your
> favourite sites.   

The More interesting question is: how possible is a complete "DNS
takedown"?

I don't feel that this is a real danger to the internet.

>From technical Site, DNS is decentral. All the Rootservers are designed
to handle a fail/takedown of 2/3 of the dns-servers.

>From the political Site, the current public DNS is controlled by the
ICANN and so (theoretical) by the USA. But I think, if they would abuse
their force too much, this just would bring more people to alternatives
like OpenNIC.

Kind Regards,
Michael

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Thor (Hammer of God | 27 Jun 2012 20:52

Re: How to access your favorite sites in the event of a DNS takedown ?

I think he was referring to a DNS blockade ala SOPA.  Though the suggestion was painfully obvious (and that I
pointed out the HOSTS file a few days back) it does show the level of complete ignorance on the part of any
legislator who thinks a DNS blockade will, in any way, affect access to pirate sites.  

Of course, we all know it is simply record industry lobbying to make the government pay to enforce copyright
infringement so that they don't have to.  It really is quite a nice scam on their part:  don't invest in any
real DRM, and make someone else pay to enforce your IP.  Nice.

Timothy "Thor"  Mullen
www.hammerofgod.com
Thor's Microsoft Security Bible

-----Original Message-----
From: full-disclosure-bounces <at> lists.grok.org.uk
[mailto:full-disclosure-bounces <at> lists.grok.org.uk] On Behalf Of Michael Stummvoll
Sent: Wednesday, June 27, 2012 4:24 AM
To: full-disclosure <at> lists.grok.org.uk
Subject: Re: [Full-disclosure] How to access your favorite sites in the event of a DNS takedown ?

Hi,

> Do you know? Even in DNS take down you can youcan access your
> favourite sites.   

The More interesting question is: how possible is a complete "DNS takedown"?

I don't feel that this is a real danger to the internet.

>From technical Site, DNS is decentral. All the Rootservers are designed
to handle a fail/takedown of 2/3 of the dns-servers.

>From the political Site, the current public DNS is controlled by the
ICANN and so (theoretical) by the USA. But I think, if they would abuse their force too much, this just would
bring more people to alternatives like OpenNIC.

Kind Regards,
Michael

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

headers

Jeffrey Walton | 28 Jun 2012 22:08

Re: How to access your favorite sites in the event of a DNS takedown ?

On Wed, Jun 27, 2012 at 7:24 AM, Michael Stummvoll <fulldis <at> stummi.org> wrote:
> Hi,
>
>> Do you know? Even in DNS take down you can youcan access your
>> favourite sites.
>
> The More interesting question is: how possible is a complete "DNS
> takedown"?
>
> I don't feel that this is a real danger to the internet.
>
> >From technical Site, DNS is decentral. All the Rootservers are designed
> to handle a fail/takedown of 2/3 of the dns-servers.
>
> >From the political Site, the current public DNS is controlled by the
> ICANN and so (theoretical) by the USA. But I think, if they would abuse
> their force too much, this just would bring more people to alternatives
> like OpenNIC.
Jon Postel tried to fix that. Its a shame he died before he completed the work.

Jeff

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/