Whitepaper discussing Windows DNS cache poisoning by forwarder DNS spoofing.
You can download it from the following link: https://packetstormsecurity.com/files/download/56012/dns-poison.txt
Source: https://packetstormsecurity.com/files/56012/dns-poison.txt.html