Name DNS Blocking
Summary An adversary intercepts traffic and intentionally drops DNS requests based on content in the request. In this way, the adversary can deny the availability of specific services or content to the user even if the IP address is changed.
Prerequisites This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.
Solutions Use a .onion domain with Tor support
Related Weaknesses
CWE ID Description
CWE-300 Channel Accessible by Non-Endpoint
Back to Top