Lucene search
+L

1805 matches found

Kitploit
Kitploit
added 2026/09/13 5:57 p.m.15 views

dref

Marco de explotación de DNS Rebinding Este proyecto ya no se mantiene. dref realiza el trabajo pesado para el DNS rebinding. El siguiente fragmento de uno de sus payloads integrados muestra el framework siendo utilizado para escanear una subred local desde un navegador comprometido; después de...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:45 p.m.12 views

CVE-2025-50505

CVE-2025-50505 API no autorizada conduce a ejecución arbitraria de comandos y escalada de privilegios en Clash Verge Rev Descripción La vulnerabilidad se origina en un endpoint API no autenticado expuesto por el componente clash-verge-service, que se instala con privilegios elevados por defecto...

7.8CVSS5.9AI score0.00231EPSS
SaveExploits1References7
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.72 views

MindsDB -DNS Rebinding SSRF Protection Bypass

Detects DNS rebinding vulnerability that allows bypass of SSRF protection. The vulnerability exists in the URL validation mechanism where DNS resolution is performed without considering DNS rebinding attacks. id: CVE-2024-24759 info: name: MindsDB -DNS Rebinding SSRF Protection Bypass author: Lee...

9.3CVSS5.8AI score0.04936EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 4:09 p.m.13 views

whonow

Servidor DNS Whonow Un servidor DNS malicioso para ejecutar ataques de DNS Rebinding sobre la marcha. whonow te permite especificar respuestas DNS y reglas de rebinding dinámicamente usando las propias solicitudes de dominio. root@kitploit: responder a consultas DNS para este dominio con...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:03 p.m.86 views

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

6.7AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/13 3:35 p.m.9 views

CVE-2025-45710

CVE-2025-45710 Lee más detalles en: https://www.partywave.site sobre CVE-2024-54819 Configurar un rebinder Esto es solo un ejemplo con un servicio web disponible al momento de escribir esto. ve a https://lock.cmpxchg8b.com/rebinder.html selecciona las 2 direcciones a alternar A,B prueba el...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:10 a.m.5 views

dns-rebinding-tool

Inspired by @tavisio This project is meant to be an All-in-one Toolkit to test further DNS rebinding attacks and my take on understanding these kind of attacks. It consists of a web server and pseudo DNS server that only responds to A queries. The root index of the web server allowes to configure...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:23 a.m.4 views

behave

Behave! 一个 仍在开发中 的监控浏览器扩展,用于检测那些行为不端的页面。 注意 :这是项目的代码仓库,如果你想获取打包好的扩展: Firefox:https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:https://chrome.google.com/webstore/detail/mppjbkhgconmemoeagfbgilblohhcica/ 介绍 Behave! 会监控并警告,如果某个网页执行了以下任何操作: 基于浏览器的端口扫描 访问私有IP 针对私有IP的DNS重绑定攻击 下面是 Behave!...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:23 a.m.42 views

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:33 a.m.6 views

rebindMultiA

rebindMultiA rebindMultiA 是一款用于执行多 A 记录重绑定攻击(Multiple A Record Rebind Attack)的工具。 rebindmultia.com 是我搭建的一个域名,用于辅助此类攻击。它使每个 IP 都成为 IP.ns.rebindmultia.com 域名的权威名称服务器。例如,13.33.33.37.ns.rebindmultia.com 的权威名称服务器是 13.33.33.37.ip.rebindmultia.com,该服务器(如您所料)解析为 13.33.33.37。 多 A 记录重绑定攻击 多 A 记录重绑定攻击是 DNS...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:26 a.m.71 views

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:26 a.m.5 views

rbndr

rbndr Servicio simple de Rebinding DNS rbndr es un servidor de nombres muy simple y no conforme para probar software contra vulnerabilidades de DNS rebinding. El servidor responde a consultas seleccionando aleatoriamente una de las direcciones especificadas en el nombre de host y devolviéndola co...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:00 a.m.8 views

singularity

Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/13 1:57 a.m.10 views

revsuit

RevSuit - A Flexible and Powerful Reverse Connection Platform 简体中文 |English 简介 RevSuit 是一款灵活并且强大的反连平台。目前支持 HTTP、DNS、RMI、LDAP、MySQL 和 FTP 协议。 灵活: 1. 通过灵活的规则来捕获连接 2. 通过二进制文件部署和运行而无需担心讨厌的依赖错误 强大: 1. 可以通过规则,为不同类型的连接自定义响应,并且可以使用模板变量实现动态响应。 2. 支持的协议数量相对较多,并且支持其中的部分协议的进一步利用,如 DNS重绑定、MySQL客户端文件读取和 JDBC...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 10:30 p.m.41 views

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:07 p.m.6 views

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | 21 de enero de 2023 Este experimento está destinado a demostrar cómo funciona el ataque de DNS rebinding en un IoT emulado. En la configuración, tenemos un dispositivo IoT simulado, que puede ser controlado a través de una interfaz web esto es típico para muchos...

8.8CVSS7.3AI score0.01476EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 6:41 p.m.6 views

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Aviso de seguridad | Payloads incluidos | Preguntas frecuentes DESCARGO DE RESPONSABILIDAD: Este software es solo con fines educativos. Este software no debe utilizarse para actividades ilegales. El autor no es responsable de su uso. No seas un imbécil. DNS Rebind Toolki...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/12 3:39 p.m.5 views

dnsFookup

DnsFookup v 2.0.1 Revinculación de DNS framework que contiene: un servidor DNS obviamente API web en Python para crear nuevos subdominios y controlar el servidor DNS, ver registros, cosas por el estilo una cutre aplicación React para hacerlo más cómodo Registro de cambios Documentación de la API...

5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/11 8:35 p.m.10 views

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

Summary In SSE/HTTP transport mode, mysqlmcpserver constructs SseServerTransport without passing securitysettings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service...

SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2026/09/10 10:53 p.m.9 views

CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding

https://hackintoanetwork.com/blog/2023-starlink-dns-rebinding-attack-eng...

8.8CVSS5.2AI score0.00534EPSS
SaveExploits2
Rows per page
Query Builder