4 ms·
Send one request to such a random domain over DoH or DoT to some DNS server you control for the purpose (Google can easily set such a thing up). Ensure the resp
by SAI_Peregrinus 6y ago
Send one request to such a random domain over DoH or DoT to some DNS server you control for the purpose (Google can easily set such a thing up). Ensure the response is NXDOMAIN. If it's not, generate a new random domain and retry.
Send a second request of the same domain via the system DNS. If it's not NXDOMAIN, it's hijacking unknown DNS requests.
One request that might hit the root instead of 3.