DNS_Tunneling

Introduzione Ispirato dal lavoro recente che ho svolto riguardante i beacon DNS di Cobalt Strike, insieme a una dichiarazione d'intenti per cercare di eludere Microsoft Defender for Endpoint, ho speso un po' di tempo a studiare come il DNS potrebbe essere utilizzato per trasferire un payload su u...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

ddoor

ddoor backdoor multipiattaforma che utilizza record DNS TXT Cos'è ddor? ddor è un backdoor leggero multipiattaforma che utilizza record TXT per eseguire comandi su macchine infette. Caratteristiche Permette a un singolo record TXT di avere comandi separati per macchine Linux e Windows Elenco di...

dark-doh

dark-doh.exe versione pubblica Scopo: scaricare file tramite DoH, oppure scaricare ed eseguire uno shellcode non implementato nella versione pubblica Esempio di esecuzione: dark-doh.exe file1 download google yourdomain.com Aggiunto lo script Python di supporto per la generazione delle zone DNS...

goldig

Progetto spostato su github.com/rtfmkiesel/goldig goldig Esegue comandi su Windows tramite record DNS. Questa utility crea un server DNS e serve un record TXT malevolo. Basta copiare e incollare il comando dall'output della console nella shell Windows. Utilizzo root@kitploit: usage: goldig OPTION...

CVE-2026-50980

Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...

EUVD-2026-67917

Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...

CVE-2026-50980

oPanel (web hosting control panel) versions before v1.20.25 are affected by a stored Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component. The panel reflects DNS TXT record responses in the web interface without sufficient HTML encoding. A remote attacker can configure ...

policymaker

policymaker Genera una vera politica di divulgazione delle vulnerabilità — VDP, safe harbor, security.txt e DNS Security TXT — in pochi minuti. Nessun avvocato richiesto...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

CVE-2026-50980

CVE-2026-50980: DNS-basierte Cross-Site-Scripting XSS & Session Hijacking in oPanel Übersicht CVE-ID: CVE-2026-50980 Produkt: oPanel Betroffene Versionen: v1.20.25 Schwachstellentyp: Stored Cross-Site-Scripting XSS über DNS / Session Hijacking Schweregrad: Hoch...

CVE-2026-54347

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characters, lib/Froxlor/UI/Callbacks/Text.php returns the content from Text::wordwrap without HTML escaping, and...

Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

Summary A stored Cross-Site Scripting XSS vulnerability in Froxlor's DNS editor allows an authenticated user with DNS editor access customer role to inject arbitrary JavaScript into any administrator's browser session. When an administrator views the DNS configuration of an affected domain, the...

EUVD-2026-61219

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characters, lib/Froxlor/UI/Callbacks/Text.php returns the content from Text::wordwrap without HTML escaping, and...

CVE-2026-54347 Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characters, lib/Froxlor/UI/Callbacks/Text.php returns the content from Text::wordwrap without HTML escaping, and...

CVE-2026-54347

In Froxlor prior to 2.3.8, a low-privileged authenticated customer can store JavaScript in a DNS TXT record; it is rendered unescaped via the Twig |raw filter and an unescaped Text::wordwrap callback, auto-executing when an admin views the DNS table, enabling session theft and full admin account ...

CVE-2026-54347 Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

Froxlor is open source server administration software. Prior to 2.3.8, DNS TXT record content accepted by lib/Froxlor/Api/Commands/DomainZones.php can contain HTML special characters, lib/Froxlor/UI/Callbacks/Text.php returns the content from Text::wordwrap without HTML escaping, and...

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. "These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but...

EUVD-2026-54487

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...

CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...