typodetect

TypoDetect 此工具为蓝队、安全运营中心（SOC）、研究人员和公司提供检测其域名活跃变异的能力，从而阻止这些域名被用于欺诈活动（如钓鱼和短信钓鱼）。 为此，TypoDetect 允许使用 IANA 网站上发布的最新版 TLD（顶级域名）、验证区块链 DNS 中的去中心化域名以及 DoH 服务（基于 HTTPS 的 DNS）中的恶意软件报告。 为了方便用户，TypoDetect 默认以 JSON 格式返回报告，也可根据用户选择以 TXT 格式返回，并在屏幕上显示生成的变异摘要、活跃域名以及检测到的恶意软件或去中心化域名报告。 安装 克隆此仓库： root@kitploit: git...

libredns.gr

DNS - 通过TLS/HTTPS 支持 加入 许可证...

godoh

🕳 godoh 一个基于DNS-over-HTTPS的命令与控制概念验证 介绍 godoh 是一个概念验证的命令与控制框架，使用Golang编写，利用DNS-over-HTTPS作为传输媒介。目前支持的提供商包括Google、Cloudflare，同时也支持使用传统DNS。 安装 您只需要 godoh 二进制文件本身。二进制文件可从发布页面的标签版本中下载。 要从源码构建 godoh，请遵循以下步骤： 确保您已安装Go 1.13+ 使用 git clone https://github.com/sensepost/goDoH.git 克隆此仓库 运行 make key...

NSEC3-X

免责声明：本项目由人工智能（AI）生成，但经过了严格的“人在环路”（HITL）流程。这意味着代码已由人类软件工程师审查和重构，架构设计由人类指导，并执行了基本的安全审计以验证功能并排除典型的AI幻觉。该流程确保的质量和可靠性是纯AI生成无法保证的。 NSEC3-X NSEC3-X 是一款专为审计 DNSSEC NSEC3 配置而设计的专业取证与渗透测试工具。它提供了 nsec3walker 等传统工具的现代高性能替代方案，集成了区域枚举（收割）和哈希逆向（破解）功能。 该工具使用 Go 语言编写，设计为自包含、无依赖的二进制文件，适用于受限环境中的部署。 技术概述...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...

Security update for bind

This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...

Linux Distros Unpatched Vulnerability : CVE-2026-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...

SUSE CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...

GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...

GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...

CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208 Denial of service via DoH3 queries

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

CVE-2026-40208

CVE-2026-40208 concerns DoH3 servers handling DoH3 GET queries with an invalid DATA frame, potentially delaying processing and causing a denial of service. The available records state the impact as availability loss (LOW) with a CVSS 3.1 base score of 3.7, network-exposed and requiring no privile...

CVE-2026-40208 Denial of service via DoH3 queries

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

PT-2026-52380

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can delay the processing of DNS over HTTPS DoH3 queries by sending DoH3 GET queries containing an invalid DATA frame. Recommendations At the moment,...

SUSE-SU-2026:22319-1 Security update for dnsdist

This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content bsc1261236. - CVE-2026-0397: CORS misconfiguration can lead to information disclosure bsc1261237. - CVE-2026-24028: crafted DNS response packet can lead to an out-of-bounds rea...

SUSE-SU-2026:22198-1 Security update for bind

This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. - CVE-2026-3593: Heap use-after-free...