258 matches found
typodetect
TypoDetect This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available versio...
godoh
🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...
libredns.gr
DNS - over TLS/HTTPS Support Join License...
dnscrypt-proxy
概述 一个灵活的 DNS 代理，支持现代加密 DNS 协议，如 DNSCrypt v2（包括 Post-Quantum DNSCrypt DNSCrypt 2026）、DNS-over-HTTPS、Anonymized DNSCrypt 和 ODoH Oblivious DoH。 dnscrypt-proxy 文档 ← 从这里开始 DNSCrypt 项目主页 讨论 DNS-over-HTTPS 与 DNSCrypt 解析器 服务器与客户端实现 DNS 印章 常见问题 下载最新版本 提供源代码和预编译二进制文件，适用于大多数操作系统和架构（见下文）。 功能 DNS 流量加密与认证。支持使用...
DoH_c2_Trigger
DoHc2Trigger 博客文章（blogpost）的配套代码：https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...
nextdns
NextDNS CLI 客户端 NextDNS CLI 是一款命令行工具，可让你使用 NextDNS 的 DNS-over-HTTPS DoH 服务，并具备高级功能。尽管最先进的功能仅适用于 NextDNS，但该程序也可作为任何 DoH 提供商的客户端，或 NextDNS + 其他 DNS 的组合（split horizon）。 该 CLI 主要面向路由器和基于 UNIX 的系统，但它同样非常适合 Windows 和 macOS，尤其是那些偏好完全开源客户端且不介意缺少 GUI 的用户。 安装和使用说明请参阅 wiki。 Shell 补全 root@kitploit: nextdns...
ddoor
ddoor 使用DNS TXT记录的跨平台后门 什么是ddor? ddor 是一个跨平台轻量级后门，使用TXT记录在受感染机器上执行命令。 特性 允许单个TXT记录为Linux和Windows机器分别设置命令 大约10个公共DNS服务器的列表，随机选择 不可预测的回调时间 使用自定义密码的XOR加密TXT记录 支持DNS over HTTPS（感谢Keith @keharv添加此功能！） Linux特性: 反调试，如果检测到ptrace附加到进程，它将退出。 进程名称/线程名称被隐藏，一个假名称覆盖所有系统参数和文件名，使其看起来像合法程序。 自动守护进程化...
zoshrinkC2
MeliziaC2 DNS over HTTPS 定向恶意软件（仅运行一次） ! 部分功能尚不可用！ ! WIP，请勿在生产环境使用！ 主要特性 失败时自动删除恶意软件 完全加密（每个受害者独立的 RSA 密钥）的 DoH（DNS-over-HTTPS）通信 恶意软件仅运行一次！ 示意图 图片 依赖 https://github.com/demon-i386/throatcut 使用步骤 0 - 编辑 contractgenerator.py 文件 root@kitploit: modify C2ServerVariable: C2ServerIP =...
DoHC2
⚠️ NOTA: Esta herramienta ya no está en mantenimiento activo. DoHC2 DoHC2 permite que la librería ExternalC2 de Ryan Hanson https://github.com/ryhanson/ExternalC2 se utilice para el comando y control C2 a través de DNS sobre HTTPS DoH. Está diseñado para el popular software de simulación de...
NSEC3-X
DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...
Security update for bind
This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...
Linux Distros Unpatched Vulnerability : CVE-2026-40208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...
SUSE CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...
GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...
GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns
CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...
CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
