DNSWatch

DNSWatch - DNS 流量嗅探与分析工具 DNSWatch 是一款强大的数据包嗅探工具，旨在监控和分析网络中的 DNS（域名系统）流量。本脚本提供了一套全面的功能，帮助用户高效地理解和管理 DNS 活动。无论您是网络管理员、网络安全专业人员，还是好奇的爱好者，DNSWatch 都能让您深入了解 DNS 请求、检测异常并增强网络安全。 功能特点 DNS 数据包嗅探 ：脚本可以在用户指定的网络接口上嗅探 DNS 数据包。 详细输出 ：如果用户启用详细模式，脚本会提供详细输出。 目标 IP 分析 ：用户可以指定目标 IP 地址来分析 DNS 响应。 DNS 类型分析...

aiodnsbrute

异步DNS暴力破解 一个Python 3.5+工具，使用asyncio异步暴力破解域名。 速度 速度很快。 小规模VPS主机上的基准测试显示，约10万次DNS解析耗时1.5-2分钟。一台亚马逊M3机器在3分钟左右完成了100万次请求。实际速度可能因环境而异。如果你纯粹追求速度，最好避免使用谷歌的解析器。 免责声明 你的ISP和家用路由器的DNS服务器可能很糟。如果追求速度，请使用带有快速解析器的VPS（或自己搭建）。 警告 该工具可能产生大量DNS流量。如果你DoS了别人的DNS服务器，本人概不负责。 安装 root@kitploit: $ pip install aiodnsbrute...

Allocation of Resources Without Limits or Throttling

Overview zeroconf is a Pure Python Multicast DNS Service Discovery Library Bonjour/Avahi compatible Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the DNSIncoming.logexceptiondebug function and the exception-deduplication, which stores...

CVE-2026-42255

Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation...

DNS Monitoring System with HTTP Dashboard

This Python script implements a small Security Operations Center Mini SOC that focuses on DNS traffic monitoring...

EUVD-2018-13354

Malware in sbrugna...

EUVD-2025-0150

Malicious code in bioql PyPI...

EUVD-2024-22888

Malicious code in bioql PyPI...

Denial Of Service (DoS)

github.com/apache/trafficcontrol is vulnerable to Denial of Service DoS. The vulnerability is due to TCP connections on the DNS port remaining in the ESTABLISHED state indefinitely, which allows an attacker to exhaust the thread pool handling DNS requests and prevent the service from processing...

CVE-2025-23028

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

CVE-2018-20812

An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...

Google Chrome OS Information Disclosure Vulnerability (CNVD-2025-09152)

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an information disclosure vulnerability that stems from a failure to properly tunnel DNS traffic during VPN state transitions, for which no detailed vulnerability details are...

Denial Of Service (DoS)

github.com/cilium/cilium is vulnerable to Denial Of Service DoS. The vulnerability is due to a flaw in Cilium's handling of DNS traffic when configured to proxy it in a Kubernetes cluster, allowing an attacker to send a crafted DNS response to workloads outside the cluster, causing Cilium agents ...

BIT-HUBBLE-RELAY-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

BIT-CILIUM-OPERATOR-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

BIT-CILIUM-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

CVE-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

Amazon Linux 2 : unbound (ALAS-2024-2650)

The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2650 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that i...

CVE-2024-8508

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression ...

CVE-2024-8508

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression ...