One Day Sec

What does the DnsPlugin feature of mimilib do and how is it deployed?

The DnsPlugin feature, exporting `DnsPluginInitialize`, `DnsPluginCleanup`, and `DnsPluginQuery`, logs DNS queries on a DNS server. Deploy mimilib.dll to `%SystemRoot%\System32` on the DNS server, add a registry key `ServerLevelPluginDll` under `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DNS\Parameters` with value `mimilib.dll`, then restart. The DNS service (dns.exe) loads the DLL and writes query names and types to `kiwidns.log`. Remote deployment via dnscmd is discussed in Domain Penetration—Using dnscmd to Achieve Remote DLL Loading on DNS Servers.
mimilibDnsPluginDNS loggingkiwidnsregistryDNS serverdnscmdquery logging

Browse all Q&A →