rapid7/metasploit-framework

# Dynamic DNS Update Injection

`dyn_dns_update` module allows adding or deleting DNS records
on a DNS server that allows unrestricted dynamic updates.

## Vulnerable Application

Any DNS server that allows dynamic update for none trusted source IPs.

## Verification Steps

 1. Start msfconsole
 2. Do: ```auxiliary/scanner/dns/dyn_dns_update```
 3. Do: ```set DOMAIN [IP]```
 4. Do: ```set NS [IP]```
 5. Do: ```set INJECTDOMAIN [IP]```
 6. Do: ```set INJECTIP [IP]```
 7. Do: ```set ACTION ADD```
 8. Do: ```run```

## Actions

There are two kind of actions the module can run:

 1. **ADD** - Add a new record. [Default]
 2. **DEL** - Delete an existing record.

## Targeting Information

WPAD may not work with Windows 2008+ targets due to a DNS block list: https://technet.microsoft.com/en-us/library/cc995261.aspx