godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

libredns.gr

DNS - over TLS/HTTPS Support Join License...

typodetect

TypoDetect This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available versio...

dnscrypt-proxy

概要 柔軟なDNSプロキシで、DNSCrypt v2（ポスト量子 DNSCrypt（DNSCrypt 2026）を含む）、DNS-over-HTTPS、Anonymized DNSCrypt、ODoH Oblivious DoH といった最新の暗号化DNSプロトコルをサポートします。 dnscrypt-proxy ドキュメント ← ここから始めてください DNSCrypt プロジェクトホームページ ディスカッション DNS-over-HTTPS および DNSCrypt リゾルバ サーバーおよびクライアント実装 DNS スタンプ FAQ 最新リリースをダウンロード...

nextdns

NextDNS CLI クライアント NextDNS CLI は、NextDNS の DNS-over-HTTPS DoH サービスを高度な機能付きで利用できるコマンドラインツールです。最も高度な機能は NextDNS でのみ動作しますが、このプログラムはあらゆる DoH プロバイダーや、NextDNS + 別の DNS（スプリットホライズン）の組み合わせのクライアントとしても動作します。 この CLI は主にルーターや UNIX ベースのシステムを対象としていますが、Windows や macOS...

ddoor

ddoor 크로스 플랫폼 DNS TXT 레코드 기반 백도어 ddoor란 무엇인가? ddor는 TXT 레코드를 사용하여 감염된 시스템에서 명령을 실행하는 크로스 플랫폼 경량 백도어입니다. 특징 단일 TXT 레코드로 Linux와 Windows 시스템 각각에 별도의 명령을 지정할 수 있음 약 10개의 공개 DNS 서버 목록에서 무작위로 선택 예측 불가능한 콜백 시간 사용자 지정 암호로 XOR을 사용해 TXT 레코드 암호화 DNS over HTTPS 지원 Keith@keharv님께 감사드립니다! Linux 기능: 안티 디버깅:...

DoH_c2_Trigger

DoHc2Trigger ブログ記事のコード: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...

zoshrinkC2

MeliziaC2 DNS over HTTPS を使用した標的型マルウェア（一度だけ実行される） ! 一部の機能はまだ利用できません ! ! WIP、本番環境では使用しないでください ! 主な機能 失敗時にマルウェアを自動削除 完全暗号化（被害者ごとのRSA鍵）DoH（DNS-over-HTTPS）通信 マルウェアは一度だけ実行される！ 図 画像 必要要件 https://github.com/demon-i386/throatcut 使用手順 0 - contractgenerator.py ファイルを編集 root@kitploit: modify C2ServerIP...

NSEC3-X

면책 조항: 이 프로젝트는 인공지능AI에 의해 생성되었으나 엄격한 "휴먼 인 더 루프"HITL 프로세스를 거쳤습니다. 즉, 코드는 인간 소프트웨어 엔지니어가 검토 및 리팩토링했고, 아키텍처 설계는 인간이 지시했으며, 기능을 검증하고 일반적인 AI 환각 현상을 배제하기 위한 기본 보안 감사가 수행되었습니다. 이 프로세스는 순수 AI 생성으로는 보장할 수 없는 수준의 품질과 신뢰성을 제공합니다. NSEC3-X NSEC3-X는 DNSSEC NSEC3 구성을 감사하기 위해 설계된 특수 포렌식 및 침투 테스트 도구입니다...

DoHC2

⚠️ 注記: このツールはもはや活発にメンテナンスされていません。 DoHC2 DoHC2 は、Ryan Hanson https://github.com/ryhanson/ExternalC2 による ExternalC2 ライブラリを、 DNS over HTTPS DoH を介したコマンド&コントロール C2 のために利用できるようにします。これは、広く使われている アドバーサリシミュレーションおよびレッドチーム運用ソフトウェアである Cobalt Strike https://www.cobaltstrike.com 向けに構築されています。 プレゼンテーション...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...

Security update for bind

This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...

Linux Distros Unpatched Vulnerability : CVE-2026-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...

SUSE CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...

GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...

GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...

CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208

CVE-2026-40208 concerns DoH3 servers handling DoH3 GET queries with an invalid DATA frame, potentially delaying processing and causing a denial of service. The available records state the impact as availability loss (LOW) with a CVSS 3.1 base score of 3.7, network-exposed and requiring no privile...