nanog mailing list archives

Re: DNS poisoning at Google?


From: "John Levine" <johnl () iecc com>
Date: 27 Jun 2012 05:29:40 -0000

In article <ED78B1C68B84A14FA706D13A230D7B431954E95B () ITS-MAIL01 campus ad csulb edu> you write:
I'm not familiar with curl and don't understand what I type and what are results. Are you suggesting that when
google refers to our website, we pick that up and redirect to couchtarts?

curl is a command line www client that's worth knowing about.

And I observe the same thing, using my own local DNS cache -- if I
fetch the home page from csulb.edu or www.csulb.edu with Google as the
referrer, it returns a page that redirects to couchtarts.

Sorry, dude, you've been pwn3d.

R's,
John


Airy:~ user$ curl -e 'http://google.com&apos; csulb.edu <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.couchtarts.com/media.php";>here</a>.</p>
</body></html>



Current thread: