DoH_c2_Trigger

DoHc2Trigger ブログ記事のコード: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...

dark-doh

dark-doh.exe 公開版 目的: DoH 経由でファイルをダウンロードする、またはシェルコードをダウンロードして実行する（公開版には未実装） 実行例: dark-doh.exe file1 download google yourdomain.com DNSゾーン生成用のPythonサポートスクリプトを追加（py-prepzones.py）。 !!! 免責事項 !!! 作者は、dark-doh.exe をどのように使用するかについて、一切の責任を負いません。...

ioc2rpz

ioc2rpz™는 위협 인텔리전스를 실행 가능하게 만듭니다 목차 간략 요약 개요 ioc2rpz™: 위협 인텔리전스가 DNS와 만나는 곳 아키텍처 개요 ioc2rpz™ 사용 방법 ioc2rpz™ 웹 인터페이스 프로토콜 지원 포트 요약 UDP 포트 53 TCP 포트 53 DNS over TLS / DoT 포트 853 DNS over HTTPS / DoH 포트 443/8443 속도 제한 DNS NOTIFY ioc2rpz™ vs ISC BIND vs 기타 DNS 설치 Docker 컨테이너 환경 변수 Docker Compose AWS에...

gha-lab-6904b2ccbe

自動化された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されているGitHub Actionsワークフローの脆弱性を再現することを目的として、自動化ハーネスによって構築された使い捨てラボです。これは serverless-dns/serverless-dns のコミット...

dns-benchmark-tool

⚠️ 이 프로젝트는 이동되어 더 이상 유지되지 않습니다. 후속 버전 설치: pip install net-benchmark 저장소: https://github.com/net-benchmark/net-benchmark 모든 기존 명령과 플래그는 완전히 호환됩니다. DNS 벤치마크 도구 BuildTools - 네트워크 성능 제품군의 일부 DNSSEC 검증, DoH/DoT 지원 및 엔터프라이즈 기능을 갖춘 빠르고 포괄적인 DNS 성능 테스트 bash pip install dns-benchmark-tool dns-benchmark...

The vulnerability of the dns.Msg.Unpack() function in the plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go files of the coredns server allows a attacker to compromise the integrity of the protected information.

The vulnerability of the dns.Msg.Unpack function in the plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go files of the coredns server is related to the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to...

GHSA-9GM5-9RFH-M6VX CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...

EUVD-2026-80989

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP...

CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...

CVE-2026-86003

CoreDNS (a DNS server written in Go) prior to 1.14.7 fails to enforce the dns.DefaultMsgAcceptFunc request policy on its DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners. Unlike the UDP, TCP, and DNS-over-TLS paths, these listeners call dns.Msg.Unpack without that polic...

CVE-2026-86003 CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go call dns.Msg.Unpack without the dns.DefaultMsgAcceptFunc request policy...

CVE-2026-86003 CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/serverquic.go, and core/dnsserver/servergrpc.go call dns.Msg.Unpack without the dns.DefaultMsgAcceptFunc request policy...

CVE-2026-77692

CVE-2026-77692 allows an unauthenticated remote attacker to crash the BIND 9 named daemon by sending a single crafted DNS-over-HTTPS (DoH) request containing a cryptographically invalid SIG(0) record and then closing the transport connection prematurely . The resulting abort produces an availabil...

CVE-2026-77692 Unauthenticated remote crash of named via a single DoH SIG(0) request

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

CVE-2026-82720

A flaw was found in Unbound. When compiled with DNS-over-HTTPs DoH support, a use-after-free vulnerability exists in the DoH stream cleanup code. A remote malicious actor can exploit this by sending a specially crafted DoH connection under specific failure conditions, such as an RPZ drop query or...

DEBIAN-CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

CVE-2026-82720

NLnet Labs Unbound versions 1.12.0 through 1.26.0 contain a use-after-free vulnerability in the DNS-over-HTTPs (DoH) code path when compiled with --with-libnghttp2. During failure code paths (e.g., RPZ drop query or jostle due to heavy traffic), a dropped DoH stream tears down the entire DoH sess...

EUVD-2026-80293

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...