Burp Suite User Forum

Create new post

DNS Configuration for private collaborator server

Wijit | Last updated: Nov 08, 2017 10:16AM UTC

I have started setup the private collaborator server on Digital Ocean, but I'm very new to DNS configuration stuff. The Burp collaborator health check shows "Verify DNS Interaction" and "We communicated with the collaborator, and appeared to successfully record events, however when we attempted to retrieve the interaction records the expected records weren't present." Now I'm using Digital Ocean DNS Manager instead of BIND. Is it necessary to set up my own BIND? Could you please provide a full guide to set this up? Thank you so much

PortSwigger Agent | Last updated: Nov 08, 2017 10:17AM UTC

Hi Wijit, Thanks for your message. There's information about DNS Configuration for Private Collaborator here: - https://portswigger.net/burp/help/collaborator_deploying#dns You shouldn't need to run your own Bind. You just need to configure Digital Ocean DNS Manager as the document says. If you're still having difficulty, please send a screenshot of your DNS configuration.

Burp User | Last updated: Nov 08, 2017 10:51AM UTC

Hi Paul, Thank you for your prompt reply. I'm still struggling with the configuration. Here are my screenshots of DNS configuration and JSON file. https://imgur.com/a/SdjP6 Thank you so much

PortSwigger Agent | Last updated: Nov 08, 2017 10:55AM UTC

Hi Wijit, Ok, to get it working on foo.bar.me. You want this DNS config. NS foo.bar.me ns1.foo.bar.me NS foo.bar.me ns1.foo.bar.me A foo.bar.me <your_ip> A ns1.foo.bar.me <your_ip> A ns2.foo.bar.me <your_ip> Be aware that setting this up for bar.me should be possible, but there may be more complications compared to foo.bar.me. Let me know how you get on. If you're struggling, it would be helpful to see your domain name.

Burp User | Last updated: Nov 08, 2017 12:09PM UTC

Hi John, Sorry to say I'm still trying to solve this issue. Here is my new DNS conf. https://imgur.com/a/wJjmH Thank you

PortSwigger Agent | Last updated: Nov 08, 2017 12:18PM UTC

Ok, I think we're nearly there now. You need the original NS records for your top domain. Add these: NS lzrckt.me ns1.digitalocean.com. NS lzrckt.me ns2.digitalocean.com.

Burp User | Last updated: Nov 08, 2017 01:25PM UTC

Now I have interactions of DNS query, however, it shows this errors. I've attached two screenshots from burp health check and DNS config. https://imgur.com/a/GFW7T Thank you

PortSwigger Agent | Last updated: Nov 08, 2017 01:45PM UTC

Great! Next issue: looks like a firewall is blocking connections. This might be something in Digital Ocean, or iptables on your server. Is you certificate self-signed? In that case you'll need to either install it in the Java certificate store, or use "Poll over unencrypted HTTP" Please let us know if you need any further assistance.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.