Preliminary research
One Char to Rule Them All: DNS Silent Vulnerabilities in Domain Name Resolution
AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
The SHAR (special-characters) attack against DNS. RFC 1035 and RFC 2181 disagree on which characters domain labels may contain, and DNS components handle unsupported characters inconsistently, many silently dropping the query with no response. That silence enhances 10 of 13 off-path cache-poisoning attacks, revives TxID/port brute-force poisoning by widening the spoofing window, and disrupts nameserver load-balancing for persistent DoS. Tested across 31 DNS implementations and 12.5M domains.
Record
- Researcher
- Fasheng Miao, Xiang Li, Changqing An and Jilong Wang
- Format
- Whitepaper
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Fasheng Miao, Xiang Li, Changqing An and Jilong Wang, first published at the original source. Preserved copies are kept so the citation survives its host.