1

BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet
This paper proposes a BreakSPF attack framework, a newly discovered method for attackers to bypass the SPF protocol and launch email spoofing attacks.
Chuhan Wang, YASUHIRO KURANAGA, Yihang Wang, Mingming Zhang, Linkai Zheng, Xiang Li, Jianjun Chen, Haixin Duan, Yanzhong Lin, Qingfeng Pan
PDF Cite Code Project
BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet
BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet
本论文提出了一个名为BreakSPF的攻击框架：攻击者新发现的一种绕过SPF协议并发起电子邮件欺骗攻击的方法。
Chuhan Wang, YASUHIRO KURANAGA, Yihang Wang, Mingming Zhang, Linkai Zheng, Xiang Li, Jianjun Chen, Haixin Duan, Yanzhong Lin, Qingfeng Pan
Feb 26, 2024 Email
PDF Cite Code Project
BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet
Poster: ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing
在本文中，我们提出了一个全新的工具ResolverFuzz用来模糊测试解析器。
Qifan Zhang, Xuesong Bai, Xiang Li, Haixin Duan, Qi Li, Zhou Li
PDF Cite Code Project
Poster: ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing
Poster: ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing
In this paper, we propose ResolverFuzz to fuzz the resolver.
Qifan Zhang, Xuesong Bai, Xiang Li, Haixin Duan, Qi Li, Zhou Li
Feb 26, 2024 DNS
PDF Cite Code Project
Poster: ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing
ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies with Differential Fuzzing
This paper proposes a new automated fuzzing tool “ReqsMiner” to discover CDN forwarding request inconsistencies.
Linkai Zheng, Xiang Li, Chuhan Wang, Run Guo, Haixin Duan, Jianjun Chen, Chao Zhang, Kaiwen Shen
PDF Cite
ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies with Differential Fuzzing
ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies with Differential Fuzzing
该文提出一种新的自动化模糊测试工具“ReqsMiner”来发现CDN转发请求的不一致。
Linkai Zheng, Xiang Li, Chuhan Wang, Run Guo, Haixin Duan, Jianjun Chen, Chao Zhang, Kaiwen Shen
Feb 26, 2024 CDN
PDF Cite
ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies with Differential Fuzzing
Understanding the Implementation and Security Implications of Protective DNS Services
This paper analyzes the ecosystem of protective DNS and its security issues.
Mingxuan Liu, Yiming Zhang, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Xiaofeng Zheng
PDF Cite Code Project
Understanding the Implementation and Security Implications of Protective DNS Services
Understanding the Implementation and Security Implications of Protective DNS Services
本文分析了Protective DNS的生态系统及其安全问题。
Mingxuan Liu, Yiming Zhang, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Xiaofeng Zheng
Feb 26, 2024 DNS
PDF Cite Code Project
Understanding the Implementation and Security Implications of Protective DNS Services
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
In this paper, we present the TsuKing attack.
Wei Xu, Xiang Li, Chaoyi Lu, Baojun Liu, Jia Zhang, Jianjun Chen, Tao Wan, Haixin Duan
PDF Cite Code Project
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
In this paper, we present the TsuKing attack.
Wei Xu, Xiang Li, Chaoyi Lu, Baojun Liu, Jia Zhang, Jianjun Chen, Tao Wan, Haixin Duan
Nov 26, 2023 DNS
PDF Cite Code Project
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers