1971 matches found
vaas-cve-2015-5477
Vulnerability as a Service - CVE 2015-5477 一个运行 Debian Wheezy Linux 系统的容器，使用了存在漏洞的 bind9 版本，用于展示 CVS-2015-5477。 概述 此 Docker 容器基于 Debian Wheezy，并已修改为使用存在漏洞的 bind9 版本及其对应的附加依赖项。 使用方法 使用 docker pull hmlio/vaas-cve-2015-5477 获取容器。 通过端口映射运行容器（为了达到最大程度的“我去！真糟糕！”效果，建议在前台启动容器而不作为后台进程）： docker run -p...
CVE-2023-50387
CVE-2023-50387 DNS中的KeyTrap（CVE-2023-50387） 本仓库仅供教育目的使用。 密钥和签名的数量已被故意保持较低，以防止用于实际攻击，且不包含用于生成碰撞密钥的脚本。 测试 搭建PoC环境 root@kitploit: $ docker compose up --build 确认DNSSEC正常工作 root@kitploit: $ docker compose exec -it attacker dig @10.10.0.3 a.a.test ; DiG 9.18.24 @10.10.0.3 a.a.test ; 1 server found ;;...
numa
Numa 你的DNS，无处不在。 — numa.rs 一个便携式DNS解析器，单一二进制文件。在任何网络上屏蔽广告，为你的本地服务命名（frontend.numa），使用自动回滚覆盖任意主机名，并通过 ODoH（RFC 9230） 密封每个出站查询，使得没有任何一方能同时看到你的身份和查询内容——这一切都在你的笔记本上完成，无需云账号或树莓派。...
dnsviz
Tabla de Contenidos Instalación Uso Pruebas de DNS Previas al Despliegue Contenedor Docker Descripción DNSViz es un conjunto de herramientas para el análisis y la visualización del comportamiento del Sistema de Nombres de Dominio DNS, incluidas sus extensiones de seguridad DNSSEC. Este conjunto d...
CVE-2023-50387
Repositorio basado en https://github.com/knqyf263/CVE-2023-50387 en el que se hicieron varias modificaciones: Añadido resolver-fixed, que tiene una implementación de Unbound en la que se arregla la vulnerabilidad de la que hablamos. Creados scripts para la automatización de generación de claves...
NSEC3-Encloser-Attack
Generación de Zonefiles para el Ataque NSEC3-Encloser Este proyecto genera zonefiles DNS con parámetros NSEC3 personalizados para reproducir y evaluar los ataques descritos en CVE-2023-50868. Requisitos Python3 probado en Python3.10 Dependencias de Python instaladas: cryptography 42.0.5 dnspython...
CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
DEBIAN-CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2026-81642
CVE-2026-81642 — Sitio de seguimiento del desbordamiento de heap en el digest de DNSKEY de Unbound Fuente para el rastreador del estado de parches de CVE-2026-81642: un sitio de una sola página que registra qué distribuciones han publicado una corrección para los desbordamientos de heap del...
CVE-2026-93657
hickory-resolver versions before 0.26.2 contain a DNSSEC validation bypass. The root cause is a failure to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, causing invalid records to be returned as successful results. An attacker controlling the a...
EUVD-2026-82939
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2026-93657
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2026-93657 hickory-resolver before 0.26.2 DNSSEC Validation Bypass
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
CVE-2026-93657 hickory-resolver before 0.26.2 DNSSEC Validation Bypass
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
dns-benchmark-tool
⚠️ 此项目已迁移，不再维护。 请安装替代项目：pip install net-benchmark 仓库：https://github.com/net-benchmark/net-benchmark 所有现有命令和标志完全兼容。 DNS 基准测试工具 属于 BuildTools - 网络性能套件 快速、全面的 DNS 性能测试，支持 DNSSEC 验证、DoH/DoT 及企业级功能 bash pip install dns-benchmark-tool dns-benchmark benchmark --use-defaults --formats csv,excel...
NSEC3-X
免责声明：本项目由人工智能（AI）生成，但经过了严格的“人在环路”（HITL）流程。这意味着代码已由人类软件工程师审查和重构，架构设计由人类指导，并执行了基本的安全审计以验证功能并排除典型的AI幻觉。该流程确保的质量和可靠性是纯AI生成无法保证的。 NSEC3-X NSEC3-X 是一款专为审计 DNSSEC NSEC3 配置而设计的专业取证与渗透测试工具。它提供了 nsec3walker 等传统工具的现代高性能替代方案，集成了区域枚举（收割）和哈希逆向（破解）功能。 该工具使用 Go 语言编写，设计为自包含、无依赖的二进制文件，适用于受限环境中的部署。 技术概述...
Amazon Linux 2 : unbound (ALASUNBOUND-1.17-2026-010)
The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2UNBOUND-1.17-2026-010 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial...
Amazon Linux 2 : unbound (ALAS-2026-3928)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3928 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service...
ISC BIND 9.11.0 < 9.20.29 / 9.11.3-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities
The version of ISC BIND running on the remote host is 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.11.3-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple vulnerabiliti...