s3enum

s3enum s3enumは、高速でステルス性の高いAmazon S3バケット列挙ツールです。DNSを利用するためHTTPを使わず、リクエストがS3サーバーアクセスログに記録されません。 元々は2016年にGitHubへの攻撃を目的として作成されました。 インストール root@kitploit: go install github.com/koenrh/s3enum@latest 使い方 ターゲットのベース名（例:...

cngo

cngo v1 快速 Golang 工具，接收包含域名的文件名，并为每个域名获取 cname s 安装 root@kitploit: $ go get -u github.com/yghonem14/cngo 基本用法 cngo 只接受文本文件： root@kitploit: $ cngo -f /targets/spotify.txt creativeservice.spotify.com - creativeservicespotify.s3.amazonaws.com crashdump.spotify.com - www.crashdump.s3.amazonaws.com 并发...

s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 存储桶接管扫描器与认领工具 📌 描述 S3 存储桶接管扫描器与认领工具 是一个基于 Python 2.7 的实用工具，能够： 1. 扫描域名，以识别潜在的 Amazon S3 存储桶接管漏洞。 2. 自动认领未注册的 S3 存储桶，并上传测试 HTML 页面。 该工具非常适合漏洞赏金挖掘、云资产审计，或经授权环境内的合法渗透测试。 ⚙️ 功能特性 ✅ 扫描多个域名，以识别存在漏洞的 S3 存储桶链接 ✅ 提取并解析域名的 CNAME 记录 ✅ 自动从 CNAME 中检测 AWS 区域 ✅ 通过 The specified bucket does...

Juniper Junos OS Multiple Vulnerabilities (JSA88135)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA88135 advisory. - NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer...

CVE-2025-40777

If a named caching resolver is configured with serve-stale-enable yes, and with stale-answer-client-timeout set to 0 the only allowable value other than disabled, and if the resolver, in the process of resolving a query, encounters a CNAME chain involving a specific combination of cached or...

K23073482: Nginx vulnerabilities CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747

Security Advisory Description CVE-2016-0742 The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response. CVE-2016-0746 Use-after-free vulnerability in the resolv...

Insufficient limits of CNAME resolution in resolver

Insufficient limits of CNAME resolution in resolver Severity: medium CVE-2016-0747 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...

CVE-2016-0747

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service worker process resource consumption via vectors related to arbitrary name resolution...

Gentoo Security Advisory GLSA 200801-16 (maradns)

The remote host is missing updates announced in advisory GLSA 200801-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-16 (maradns)

The remote host is missing updates announced in advisory GLSA 200801-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...