pretender

pretender Dein MitM-Seitenkicker für Relay-Angriffe mit DHCPv6-DNS-Übernahme sowie mDNS-, LLMNR- und NetBIOS-NS-Spoofing pretender ist ein von RedTeam Pentesting entwickeltes Tool, um Man-in-the-Middle-Positionen durch gespoofte lokale Namensauflösung und DHCPv6-DNS-Übernahme-Angriffe zu erlangen...

subjack

subjack DNS अधिग्रहण स्कैनर Subjack एक DNS अधिग्रहण स्कैनर है जो Go में लिखा गया है। इसे डोमेन की एक सूची को एक साथ स्कैन करने और उन डोमेन को पहचानने के लिए डिज़ाइन किया गया है जिन्हें हाइजैक किया जा सकता है। Go की गति और दक्षता के कारण, यह उपकरण बड़े पैमाने पर परीक्षण में वास्तव में अलग दिखता है...

dnstake

DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

DNS Dangling Record

Deploying web applications often require developers or system administrators to configure DNS records to target a third party service. Most common scenarios include to either configure a canonical name record CNAME or to declare specific name server records NS to delegate a specific DNS zone...

Kubernetes: KOPS documentation references domains which were not registered

Summary: While researching the kubernetes documentation, I found that the KOPS project's Route53 configuration references dangling DNS servers. I was able to register 3 / 4 of these domain names. I was also able to verify that some companies have been using this configuration, making them...