webstor

WebStor 組織内の脆弱なWebテクノロジーの迅速な識別 WebStorはMITライセンスの下でPythonで実装されたツールで、組織のすべてのネットワーク上のすべてのWebサイトを迅速に列挙し、それらのレスポンスを保存し、ゼロデイ脆弱性を持つものなど、既知のWebテクノロジーとバージョンを問い合わせるためのものです。特に、分散管理が行われている中規模から大規模の組織において、異なる部門やネットワークに分散した様々な管理者によって展開されたすべてのWebテクノロジーを追跡することがほぼ不可能であるという特有の問題を解決することを目的としています。...

dns-zone-transfer-test

DNSゾーン転送テスト ドメインネームシステム（DNS）ゾーン転送テストを自動化します。 指定されたドメインのネームサーバーを自動的に検出し、ゾーン転送のテストを実行します。成功した場合、特定されたAレコードが標準出力に表示されます。 使用方法 root@kitploit: dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1 zonetransfer.me 要件 root@kitploit: git = 2.36.0 python = 3.9 pip = 20.3.4 システムインストールなしでの使用...

netscout

NetScout NetScout 是一款 OSINT 工具，可根据给定的种子 URL 查找域名、子域、目录、端点和文件。 它由以下组件组成： BinaryEdge 客户端：获取子域 DNS：尝试执行 DNS 区域传送（zone transfer）以提取子域 爬虫：从种子 URL 获取 URL 和目录 SERP 客户端：获取文件链接。它使用 Google dorking 技术，根据爬虫发现的文件扩展名搜索特定文件类型 短链接扫描：此模块利用 URLTeam 的短链接列表。它会下载最近上传的列表，并检查每个条目是否存在与种子 URL...

CVE-2026-71194

A flaw was found in the OpenStack Designate mDNS NOTIFY handler. The handlenotify method performs zone lookups without poolid scoping, unlike the QUERY and AXFR handlers which were previously updated to be pool-aware. When zones with the same name exist across different DNS pools, the storage lay...

SUSE CVE-2026-50248

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint. A malicious actor that can spoof the hostname's A/AAAA record no valid RRSIG required becomes the zone'...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the transfer. An attacker can cause a panic and disrupt DNS service availability by sending an AXFR request to a zone configured with k8sexternal headless-service zone transfers when a headless service endpoint...

Authorization Bypass

libbind9.so is vulnerable to authorization bypass. A malicious user can trigger a TSIG authentication error to cause an unauthorized DNS zone transfer or other DNS transactions. This vulnerability only applies to DNS servers using bind that have no-address based ACL in place...

Knockpy - Enumerate Subdomain Scanner

Knockpy is a python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer and to try to bypass the wildcard DNS record automatically if it is enabled. Now knockpy supports queries to VirusTotal subdomains, you can setting the...

DNS Analysis Tool: Bluto

The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto will attempt to identify if SubDomain Wild Cards are being used. If they a...

漫游用友集团各大系统

简要描述： 漫游用友集团各大系统 详细说明： 在一个月黑风高的夜晚，用友某员工的集团办公平台账号，悄悄地泄露了。 // Send message Transport transport=session.getTransport; transport.connect"192.168.210.160" , 25, "ch2","1r"; transport.sendMessagemessage,new Addressnew InternetAddress"[email protected]" ; transport.close;...

Batch site DNS zone transfer vulnerability detection-bash shell implemented-vulnerability warning-the black bar safety net

0x00 background The following illustration of eecs. cc author self-built a machine with a private root DNS server, and open the zone transfer permissions, so the results: the cc zone transfer success. The figure is just an experimental verification, the following article started! ! 2 0 1 4 0 5 1 ...

北京亿中邮dns域传送漏洞

简要描述： 一dns域传送漏洞 详细说明： 北京亿中邮dns域传送漏洞 漏洞证明： root@kali: dnsenum eyou.net...

53KF的dns域传送漏洞

简要描述： 又又又一个dns域传送漏洞 详细说明： 53KF企业在线平台dns域传送漏洞 漏洞证明： root@kali: dnsenum 53kf.com...

DNS zone transfer exploit and repair notes-vulnerability warning-the black bar safety net

A, title: DNS zone transfer exploit and fix Second, the DNS transfer of the domain use 2.1 using BT5 tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com you can omit the--enum,here alert note: the host name and the field name to distinguish） Field Name...

Nmap NSE 6.01: dns-zone-transfer

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...

DNS zone transfer exploit and fix-vulnerability warning-the black bar safety net

In fact, the use of the method is divided into manual and tool two, we can use BT5 the following tools Dnsenum or other tools, hand while you use the nslookup. 1, Using the tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com This can be simple to make u...

DNS domain transfer disclosure vulnerability details-vulnerability warning-the black bar safety net

The zone transfer operation refers to a backup server to use from the main server's data to refresh their zone database. This is running the DNS service provides a certain degree of redundancy, its purpose is to prevent the primary domain name server due to an unexpected fault becomes unavailable...

Nmap NSE net: dns-zone-transfer

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: DNS Zone Transfer

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: DNS Zone Transfer

This script attempts to request a zone transfer AXFR from a DNS server. This is a wrapper on the Nmap Security Scanner's http://nmap.org dns-zone-transfer.nse. OpenVAS Vulnerability Test $Id: gbnmapdnszonetransfer.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap DNS Zone Transfer NSE...