infra_open_resolver
Detect if a DNS nameserver accepts recursive queries from any source, indicating an open resolver vulnerable to DDoS amplification attacks. Also verifies EDNS0 buffer size.
Instructions
Test if a DNS nameserver is an open resolver (accepts recursive queries from any source). Open resolvers can be abused for DDoS amplification attacks. Also checks EDNS0 buffer size from OPT record.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nameserver | Yes | IP address or hostname of the DNS nameserver to test |