Burp Suite User Forum

Create new post

DNS interaction DiG-style text represenation

Burpy | Last updated: Apr 05, 2023 07:37PM UTC

Hi, The Burp Collaborator tool uses two tabs to display information of a DNS interaction. The first tab is 'Description', which includes summary information about the interaction. The second tab is 'DNS query', that represents the received DNS query in hexadecimal and binary formats. However, both formats do not provide verbose information about the DNS query (or the reply) and are hard to follow as they are not human-readable. There is a standard text representation format for DNS Resource Records that first was introduced by RFC1035 section-5.1. This format then was adopted by the well-known DNS debugging tool DiG to represent DNS messages. Th DiG-style text format is now the de-facto standard format to represent DNS messages. This format is human-readable and much more verbose than a hex-encoded or a raw DNS message representation. It provides information about the various sections of a DNS message (DNS header flags, DNS question, DNSSEC, OPT, etc.) This is an example of Dig-Style DNS query text represenation: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17237 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: e16891eb7bfd145601000000642dccfe47cdf7deb0956269 (good) ;; QUESTION SECTION: ;portswigger.net. IN A ;; ANSWER SECTION: portswigger.net. 10 IN A 34.249.63.188 portswigger.net. 10 IN A 34.240.117.4 ;; Query time: 56 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Apr 05 15:33:18 EDT 2023 ;; MSG SIZE rcvd: 104 I believe adding a new tab to represent DNS queries/replies in DiG-style format will make working with DNS interaction information much easier.

Michelle, PortSwigger Agent | Last updated: Apr 06, 2023 04:00PM UTC

Hi This isn't something we've been asked for recently, so to help us assess the request, can you tell us a bit more about how you picture this? Do you imagine this being an additional tab? Would you just want to see the QUESTION and ANSWER sections displayed in the new tab?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.