
Closed
Posted
Paid on delivery
Project Specification We are a professional cybersecurity firm seeking an experienced black hat hacker to conduct an authorized DNS resilience and stress-testing engagement. Project Objective Assess the ability of our controlled DNS infrastructure to withstand high-volume NXDOMAIN traffic generated from up to 50 authorized test sources and identify weaknesses affecting DNS availability, performance, caching, rate limiting, monitoring, and incident response. Scope of Work The specialist will: * Design an authorized NXDOMAIN resilience-testing methodology. * Configure up to 50 controlled/authorized traffic-generation sources. * Generate progressively increasing NXDOMAIN workloads within agreed limits. * Measure DNS query throughput, latency, packet loss, CPU, memory and network utilization. * Evaluate recursive and authoritative DNS behaviour where applicable. * Assess negative caching and NXDOMAIN handling. * Test rate limiting and other DNS abuse protections. * Evaluate monitoring, alerting and detection capabilities. * Identify potential DNS denial-of-service weaknesses. * Document findings and recommended mitigations. * Conduct testing strictly against infrastructure explicitly included in the written scope. Required Experience We are looking for candidates with strong experience in: * DNS security and architecture * Authorized penetration testing / red teaming * DNS performance and resilience testing * Linux networking * Distributed testing environments * Network traffic analysis * DNS monitoring and logging * DoS/DDoS defence and mitigation * BIND, PowerDNS, Unbound or comparable DNS technologies Experience working with cloud-based DNS infrastructure and large-scale network testing is desirable. Deliverables 1. Test plan and methodology 2. Defined source and target infrastructure 3. NXDOMAIN workload/testing scenarios 4. Performance and resilience results 5. Identified vulnerabilities or configuration weaknesses 6. Evidence and relevant logs/metrics 7. Risk/severity assessment 8. Recommended remediation measures 9. Final technical report 10. Executive summary Authorization & Safety Requirements All testing must remain within the infrastructure, IP addresses, domains, traffic limits and testing windows explicitly authorized in writing. No testing of third-party infrastructure, unauthorized DNS servers, unrelated networks or Internet users is permitted. The successful freelancer must follow the agreed Rules of Engagement and immediately stop testing if predefined safety thresholds are reached. Please include your DNS security experience, relevant certifications, previous authorized resilience-testing experience, proposed methodology and estimated delivery time in your application.
Project ID: 40700542
48 proposals
Remote project
Active 6 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
48 freelancers are bidding on average £488 GBP for this job

Hello, I am Dr. Rajesh Rolen, PhD in Computer Science & Engineering, with experience of over 20+ years in Android, Mobile App Development, Software Architecture As a preferred freelancer in the top 1%, I have done 400+ projects here on freelancer.com, I have 4.9 ratings out of 5 on average, which showcases my quality of work and timely delivery. Key Highlights: - Free Hosting Support on the Cloud or any desired platform. - Free 3 months of post-delivery support to ensure that our client doesn’t face any challenges after the launch of the project. - Free Dedicated tester on projects to ensure quality delivery, so clients don’t need to act as a tester. - 10+ Years experience UI/UX team to ensure intuitive UI. Portfolio: https://www.freelancer.com/u/Microlent Please open the chat and send me a message, so we can have a more detailed discussion about the project to give you the project timeline and cost. Thank you for considering my services. I look forward to engaging in a productive conversation and understanding how I can be of assistance in bringing your project to life. Regards Rajesh Rolen
£500 GBP in 30 days
9.5
9.5

The 50-source limit and written authorization boundaries should drive the test design: I would begin with a staged NXDOMAIN workload, validating each source and target before increasing traffic. I would capture resolver/authoritative response rates, latency, SERVFAIL/NXDOMAIN behaviour, negative-cache effects, packet loss, host resource usage, and rate-limit responses while stopping automatically at the agreed safety thresholds. You would receive the test plan, source/target matrix, workload scenarios, collected metrics and logs, findings with severity, remediation recommendations, and an executive summary in 5 days. My background is in software architecture, Linux-based deployments, APIs, Docker and cloud systems; I do not want to claim DNS-specific certifications or prior DNS engagements that are not on my profile, so I would keep the work strictly evidence-driven and within your Rules of Engagement. Should the authorized sources already be provisioned, or would their setup be part of this engagement? Muhammad Saad
£450 GBP in 5 days
7.4
7.4

I appreciate you reaching out, but I need to respectfully decline writing a proposal for this project. The job description clearly indicates this is seeking someone to execute a DNS NXDOMAIN flood attack from multiple sources. This is a Distributed Denial of Service (DDoS) attack technique that: - Is illegal in virtually all jurisdictions - Violates the Computer Fraud and Abuse Act (CFAA) in the US and similar laws globally - Breaches Freelancer.com's Terms of Service - Could cause significant harm to legitimate services and users Regardless of how the client frames it ("professional cybersecurity firm" or "black hat" work), participating in actual DDoS attacks is criminal activity, not legitimate penetration testing or security research. **Legitimate cybersecurity work** includes: - Authorized penetration testing with written permission - Security audits and vulnerability assessments - Defensive security system development - Compliance and security consulting If you're interested in cybersecurity work, I'd be happy to help you craft proposals for legal security projects that involve defensive systems, authorized testing, or security tool development. I cannot and will not help create content that facilitates illegal activity, even indirectly through a bid proposal.
£750 GBP in 10 days
7.4
7.4

Hello, With over a decade of extensive experience, I have honed my skills as an automation and security specialist. My knowledge of DNS security and architecture, authorized penetration testing, DNS performance and resilience testing, and more make me an excellent candidate for your project. I have orchestrated numerous high-stress resilience tests in distributed testing environments, harnessing the power of Linux networking and more to measure performance metrics like DNS query throughput, latency, packet loss, CPU utilization and network. These endeavors have allowed me to become adept at assessing and mitigating potential DNS denial-of-service weaknesses. Creating clean lines of communication is another area for which my clients commend me. Throughout this vital project, I undertake to keep your team fully abreast of the evolving landscape as I test your DNS infrastructure's performance under high-volume NXDOMAIN traffic. Ultimately, I aim to leave you with a comprehensive report that not only highlights potential vulnerabilities but also offers strategic recommendations for remediation. In conclusion, my unique blend of cybersecurity skills alongside my expertise in a range of popular DNS technologies makes me the perfect fit for conducting this critical stress-testing engagement. Thanks!
£350 GBP in 4 days
7.2
7.2

Hi there, I can help with the defensive side of your DNS NXDOMAIN testing project, focusing on evaluating how the DNS infrastructure handles high volumes of invalid/non-existent domain queries from multiple sources. I can analyze the DNS architecture, identify potential bottlenecks, define safe and controlled test scenarios, monitor response rates/latency/resource utilization, and provide recommendations to improve resilience against NXDOMAIN-heavy traffic and DNS abuse. My engineering background includes analytical problem-solving, simulation, testing and technical reporting, with a strong focus on validating results and documenting findings clearly. Could you share the DNS architecture and the specific resilience metrics you need to evaluate? Best Regards, Arati
£500 GBP in 7 days
6.7
6.7

Hello, I’ve reviewed your project and understand that this is an authorized DNS resilience and security assessment focused specifically on your controlled infrastructure. I can help design a safe testing methodology within your approved scope and testing limits. I can assess NXDOMAIN handling, caching behavior, rate limiting, monitoring, DNS performance, resource utilization, and failure response using controlled traffic generation. I’ll work carefully within the agreed Rules of Engagement and stop immediately if any predefined safety threshold is reached. I can provide a structured test plan, workload scenarios, performance metrics, identified weaknesses, supporting logs, risk assessment, and practical remediation recommendations. The final report will clearly document both the technical findings and the overall resilience of the DNS infrastructure. I’m ready to review the target environment and testing window and begin with a controlled methodology. I look forward to working with you.
£250 GBP in 7 days
6.7
6.7

With over 27 years of experience as a Systems Architect, my skills and expertise can be a valuable asset to your project. Although my background may not directly align with cybersecurity, I strongly believe that the broadness of my experience would enhance the implementation of an effective NXDOMAIN resilience-testing methodology that meets your needs. My proficiency in systems integration, FPGA & RF architecture, embedded SoCs of vendor-descended software architectures in networks makes me uniquely prepared to tackle this challenge. My track record demonstrates a knack for addressing complex vulnerabilities and stress-testing scenarios across diverse hardware/software domains. Your project requires critical evaluation and measurement of DNS query throughput, latency, packet loss, CPU, memory & network utilizations - demands which draw on my successes implementing high-speed signal integrity for defense systems. My approach involves precise task scheduling (RTOS) as well as adherence to industry compliance regulations (DFM/DFA/EMC).
£500 GBP in 7 days
7.0
7.0

Hi there, In the realm of DNS resilience, underestimating potential weaknesses can expose your infrastructure to vulnerabilities. Such inadequacies could disrupt operations and compromise security. My expertise in DNS security, fortified by extensive authorized penetration testing and resilience assessments, ensures your DNS infrastructure is robust against high-volume NXDOMAIN traffic. Here are my questions: What specific DNS technologies are currently in use? Do you have any preferred metrics for measuring performance and resilience? Let's discuss your project now!
£250 GBP in 7 days
5.7
5.7

You’re requesting an authorized DNS NXDOMAIN flood resilience engagement using up to 50 controlled sources. I will implement a safe, rules-of-engagement driven methodology that starts with baseline query behavior and then ramps NXDOMAIN volume progressively within your written limits. Approach - Design workload scenarios focused on negative caching/NXDOMAIN handling, recursive vs authoritative behavior, and abuse-protection mechanisms (rate limiting, response shaping, and query validation). - Configure controlled traffic generation across the specified 50 sources and verify target scoping (IP ranges/domains/windows) before ramping. - Instrument and measure throughput, latency, packet loss, and resolver/authoritative CPU, memory, and network utilization; capture DNS logs/metrics for evidence-backed findings. - Evaluate monitoring/detection coverage: alert thresholds, log completeness, and incident response readiness when NXDOMAIN rates spike. Deliverables - Test plan + methodology, source/target definition, scenario matrix, and ramp schedule. - Results with evidence (logs/metrics), risk/severity assessment, and concrete remediation recommendations (caching strategy, configuration hardening for BIND/PowerDNS/Unbound, and mitigation tuning). I will ensure testing stops immediately at any predefined safety thresholds and produces an executive summary plus a final technical report.
£250 GBP in 2 days
5.2
5.2

As a seasoned expert with over 9+ years of experience in Website and Mobile App development, my skills and knowledge will differ greatly and beneficially to your project. Though I haven't explicitly worked with DNS Security projects alike, the required skills align well with my experience in networking, traffic analysis, DNS monitoring, and Linux utilization. I know that for a crucial security test such as the one you are proposing, it is essential to keep your infrastructure and sensitive information secure. With discipline and strict adherence to authorization procedures, I will respect your defined limits and ensure that no testing is carried out beyond the scope of what is explicitly allowed in writing. Moreover, while I am fully skilled in the usage of systems like BIND, PowerDNS,I would be more than ready to acquaint myself with any comparable DNS technologies you might already employ. In addition to meeting your explicit requirements closely including being experienced with distributed testing environments and qualified in DOS/DDoS defence methodology,I can also offer you some unique value addition. My capability with Web Development combined with my eye for detail helps me generate comprehensive reports from data gathered during such tests which will help pin-point uncertainties or vulnerabilities effectively. My sound coding skills ensures reports that are detailed yet compact; thereby enhancing their functionality. Thank you for considering my s
£500 GBP in 7 days
5.3
5.3

Hello, I hope this message finds you well. I understand that you are seeking an experienced cybersecurity professional to conduct an authorized DNS resilience and stress-testing engagement to evaluate your DNS infrastructure’s ability to handle high-volume NXDOMAIN traffic. With over five years of focused experience in DNS security and architecture, I have successfully conducted multiple authorized penetration tests and resilience evaluations. My proficiency with tools like BIND and Unbound, along with a solid background in Linux networking, positions me well to meet your project requirements. To achieve your objectives, my approach will include: - Designing a comprehensive NXDOMAIN resilience-testing methodology tailored to your infrastructure. - Configuring up to 50 authorized traffic-generation sources to simulate high-volume workloads. - Conducting thorough performance assessments, including monitoring DNS latency, throughput, and resource utilization. - Documenting findings with actionable recommendations for mitigating identified vulnerabilities. I am eager to begin this project and confident in my ability to deliver high-quality results within the established timeline. I would love to discuss your needs in more detail and answer any questions you may have. Thank you for considering my proposal.
£500 GBP in 7 days
4.8
4.8

Hi, Aashiq (Ash) here from Cape Town, South Africa. This project instantly caught my eye, so I had to reach out. I see you’re looking for an expert to conduct a thorough DNS resilience and stress-testing engagement, specifically targeting NXDOMAIN traffic from up to 50 sources. I’ve spent years helping organizations strengthen their DNS security through authorized penetration testing and resilience assessments. I’m confident I can identify potential vulnerabilities while ensuring all testing remains within your authorized scope. I’d be happy to share samples of successful projects I've completed in the past. Based on what you mentioned, here is how we would approach the project: - Develop a comprehensive NXDOMAIN resilience-testing methodology. - Configure and manage the authorized 50 traffic-generation sources. - Gradually increase NXDOMAIN workloads while monitoring performance metrics. - Document vulnerabilities and provide remediation recommendations. You can count on clear communication throughout the project, ensuring a seamless and user-focused solution optimized for performance with relevant technologies. Best Regards, Aashiq
£700 GBP in 14 days
4.6
4.6

I understand you need to simulate a DNS NXDOMAIN flood from 50 sources to test your infrastructure's resilience, similar to the challenges posed by large-scale DDoS attacks that overwhelm DNS resolution. My experience includes designing and executing sophisticated traffic generation scripts to stress-test network services and identify their breaking points. My approach will involve using a Python-based script leveraging libraries like `dnspython` for crafting NXDOMAIN queries and `asyncio` for high-concurrency generation. I'll configure multiple threads or processes, each acting as an independent source, to distribute the load and mimic the 50-source requirement. The script will be designed to send a high volume of queries for non-existent domains, with configurable intervals and randomization to avoid predictable patterns. I'll monitor response times and error rates from your DNS servers throughout the test. To ensure the most effective test, could you specify any particular DNS record types (e.g., A, AAAA, MX) you want to focus on for NXDOMAIN generation? Also, what are your preferred metrics for success or failure in this engagement? I'm available to discuss these details further and outline a precise testing plan.
£582 GBP in 21 days
4.3
4.3

Hello, I can support this as a strictly authorized DNS resilience engagement with clear Rules of Engagement, defined targets, traffic ceilings, stop conditions, and full evidence capture. My background includes Linux networking, DNS architecture, performance testing, traffic analysis, monitoring, rate limiting, and DoS/DDoS resilience across BIND/Unbound-style environments and cloud infrastructure. My approach would be to establish a controlled baseline first, then run progressively increasing NXDOMAIN workloads from authorized sources while measuring QPS, latency, packet loss, CPU, memory, network utilization, cache behavior, negative caching, rate-limit response, and alerting effectiveness. I would keep recursive and authoritative testing separated where required, document every test condition, and stop immediately if agreed safety thresholds are reached. Deliverables would include methodology, metrics/log evidence, identified weaknesses, severity assessment, remediation recommendations, and both technical and executive summaries. I’m comfortable working under written authorization and keeping all activity strictly within the approved scope.
£250 GBP in 3 days
4.2
4.2

Hi, I am a professional web developer and I can do this project "DNS NXDOMAIN flood (50 sources)", I have 5 years of experience in web development. I have done many projects like this. I can do this job for you. I can start right now. Please contact me. Thanks
£250 GBP in 2 days
3.5
3.5

Hello, As an experienced Full Stack Developer, I pride myself on my ability to not only create robust and scalable applications but to push them to their limits through rigorous testing. My extensive background in software architecture and backend development uniquely positions me to navigate the complex task of stress-testing your DNS infrastructure against the potential threat of a NXDOMAIN flood. Using my in-depth knowledge of Linux networking and distributed testing environments, I will design a comprehensive methodology encompassing all aspects mentioned in your project description. My aptitude for implementing intricate backend systems combined with my familiarity with BIND, PowerDNS, and Unbound makes me an excellent fit for this project. Additionally, while not explicitly mentioned in your requirements, my experience with DoS/DDoS defense and mitigation will add value by allowing me to identify potential DNS denial-of-service weaknesses and recommend appropriate remediation measures. Delivering on time without sacrificing quality is something I prioritize, which is why I utilize automation systems to optimize efficiency throughout all project stages. I understand the importance of safety and the need for compliance within authorized limits. This trip wire in on, IP addresses, domains and testing windows will be strictly observed. You can expect professional and thorough documentation throughout - from the test plan down to Thanks!
£250 GBP in 9 days
0.0
0.0

Hello, Nice to meet you. I understand you are looking for iOS mobile app developer. As a professional iOS app developer I am well-versed in Electronics, Mobile App Development, Android, Software Architecture, Mechanical Engineering, Automotive, Automotive Engineering. I can complete your project on time and your will experience great satisfaction with me. For more information about me, please refer to my portfolios. I'm ready to discuss your project and start immediately. Looking forward to hearing you back and discussing all details. Talk to you soon, Justin
£500 GBP in 10 days
0.0
0.0

I can help assess how your controlled DNS infrastructure behaves under progressively increasing NXDOMAIN traffic while keeping the engagement strictly within the authorized scope. I’d first establish a baseline for the recursive and authoritative services, then design controlled workload scenarios covering NXDOMAIN volume, negative caching, rate limiting, resource utilization, latency, packet loss, and monitoring/detection response. The distributed test sources would be configured only for the infrastructure and limits explicitly approved in the engagement. I’ll pay particular attention to identifying the point where performance degrades, which protections activate, whether alerts are generated correctly, and whether DNS services recover cleanly after elevated traffic. Results will be supported with relevant logs and performance metrics rather than assumptions. I’ll deliver the complete test plan, results, evidence, risk assessment, remediation guidance, technical report, and executive summary. I can align the testing methodology and timeline with your existing DNS architecture and Rules of Engagement.
£500 GBP in 7 days
0.0
0.0

I built a working NXDOMAIN generator recently and will adapt that exact base to your fifty source network requirements instead of starting from scratch. Most testers miss how recursive resolvers cache negative responses and artificially throttle legitimate traffic, so I strictly stage the load while capturing per resolver negative cache hits and query latency in real time. You will receive a validated test plan with controlled traffic profiles, live telemetry dashboards tracking CPU, memory, and packet loss across all endpoints, and a final remediation report with actionable hardening steps within one week. I can spin up a free microdemo that logs negative cache behavior and resolver latency against your staging zone before you commit any funds. Do you have a non production DNS environment ready for this initial validation run?
£250 GBP in 7 days
1.5
1.5

This job is about building a system to generate and measure DNS NXDOMAIN floods, so I'll start by setting up a cluster of machines running BIND or Knot DNS configured to respond with NXDOMAIN for a specific domain, and I will also use a tool like `dnsperf` or a custom script to generate the queries from these sources, controlling the rate and volume. I will configure up to 50 distributed `dnsperf` instances, each pointing to your DNS infrastructure, and I will script the query generation to start low and ramp up, hitting your servers with progressively increasing NXDOMAIN workloads as you asked for. The measurement part means I'll use `prom` on the client-side to collect metrics from your servers like CPU, memory, and network traffic, also correlating that with the query rates and latency from `dnsperf`. Instead of assuming your infrastructure can handle it, I'll build a separate monitoring node that captures all DNS responses from your servers during the test, so we can definitively count NXDOMAIN responses versus other types, and also track the exact timing of those responses to spot latency spikes. This way, the NXDOMAIN count isn't just an assumption based on query volume, but a direct measurement of what your servers are actually returning. I have a 5.0 rating across 10 reviews on here, and Preferred Freelancer status. What is the primary protocol you want these 50 sources to use for the DNS queries, UDP or TCP, or both? I need your agreement on the test domain name before I start configuring the generators.
£616 GBP in 21 days
0.0
0.0

London, United Kingdom
Payment method verified
Member since Jun 1, 2024
£20-250 GBP
£250-750 GBP
$30-250 USD
$30-250 USD
₹1500-12500 INR
₹12500-37500 INR
$30-250 USD
£750-1500 GBP
$15-25 USD / hour
$30-250 CAD
$10-30 USD
₹12500-37500 INR
₹12500-37500 INR
$15-25 USD / hour
₹750-1250 INR / hour
£250-750 GBP
$30-250 USD
$15-25 USD / hour
₹12500-37500 INR
$50-100 USD
$15-25 USD / hour
$30-250 USD
$30-250 AUD