dig

dig A local dig wrapper on macOS. The actual query is still sent by the system's built-in /usr/bin/dig. This project only appends a local TXT record after your own terminal output, for local testing convenience. It does not modify DNS, does not write zone files, and does not touch any cloud...

SpamChannel

SpamChannel Live worker hosted at https://spamchannel.haxxx.workers.dev UPDATE Aug 13 2023: Two days after my DEFCON 31 talk, MailChannels silently decided to require aDomain Lockdown Record in order to send emails from Cloudflare Workers meaning this code doesn't work anymore. However, because...

cve-2025-39682

CVE-2025-39682 exploit on kernelCTF mitigation instance This is also my first ? idk, this is a variant of CVE-2024-58239 1-day exploit. Patch: tls: fix handling of zero-length records on the rxlist This CVE was used in exp398 and and exp403. kernelCTF spreadsheet. For folder structures and how to...

CVE-2026-128991 xschem 2.9.9 through 3.4.7 Out-of-Bounds Read via read_xschem_file() Embedded-Symbol Record

xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in readxschemfile in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "" record, causing xschem to read and dereference memory below th...

CVE-2026-128991

The software xschem (versions 2.9.9 through 3.4.7 ) contains an out-of-bounds read vulnerability within the read_xschem_file() function in src/save.c. The flaw arises because the software mishandles embedded-symbol records that lack a preceding instance. An attacker can provide a crafted schemati...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

CVE-2025-40778

CVE-2025-40778 Proof of Concept Educational demonstration of DNS Cache Poisoning vulnerability via Additional Records injection. ⚠️ Disclaimer FOR EDUCATIONAL PURPOSES ONLY This tool is provided for educational and authorized security testing purposes only. Unauthorized use of this tool against...

cvelistV5

Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

DNSrecon-gui

My website: https://microjoan.com My blog: https://darkhacking.es/ Buy me a coffee: https://www.buymeacoffee.com/microjoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,...

RLSA-2026:98629 Important: c-ares security update

The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: c-ares: Denial of Service via unvalidated DNS header record counts CVE-2026-69186 c-ares: c-ares: CPU exhaustion denial of service via unbounded DNS name compression...

c-ares security update

An update is available for c-ares. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The c-ares C library defines asynchronous DNS Domain Name System requests and...

Turbolist3r

Project Status Please note I am not actively supporting this project. I may return to subdomain research at some point but my security interests lie elsewhere at the moment and my time is divided among other things. If you find an issue feel free to send a PR or fork it into your own project...

RedTeamScripts

RedTeamScripts Repository with various Red Team scripts. kill.exe Performing all kind of activities during a red team and you have several process running that you don't want to close manually. kill.exe is for you. copy it in C:\Windows\ and simply call it with the process name you want to kill...

rr

Overview rr is a lightweight tool for recording, replaying and debugging execution of applications trees of processes and threads. Debugging extends gdb with very efficient reverse-execution, which in combination with standard gdb/x86 features like hardware data watchpoints, makes debugging much...

CVE-2026-126452

OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosisfull.php that allows authenticated users to delete or clear any billing record by ID. Attackers can supply a target billing ID in the id parameter with delete or clear mode to deactivate other patients' charges and...

CVE-2026-126412

Frappe HRMS 15.0.0 before 15.64.1 and 16.0.0 before 16.19.0 lacks a write permission check on a bulk record processing action, allowing users with only read access to the related setup record to modify data. Authenticated users with the default Employee role can run the action to create and submi...

CVE-2026-126376

Vvveb 1.0.8.4 through 1.0.8.6 contains an incomplete authorization fix that allows low-privilege authors and vendors to access other users' records by bypassing adminid owner scoping. Attackers can supply filteradminid to list drafts, invoke duplicate on posts or products, or enumerate every...

CVE-2026-126314

Frappe HRMS 15.0.0 before 15.64.6 and 16.0.0 before 16.20.1 does not check access to each employee on endpoints that create records in bulk for a list of employees. An authenticated user with create permission on the affected record type, such as HR User, can create records for employees outside...