258 matches found
typodetect
TypoDetect This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available versio...
godoh
🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...
libredns.gr
DNS - over TLS/HTTPS Support Join License...
NSEC3-X
DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...
nextdns
NextDNS CLI Client NextDNS CLI is a command-line tool that allows you to use NextDNS's DNS-over-HTTPS DoH service with advanced capabilities. Although the most advanced features will only work with NextDNS, this program can work as a client for any DoH provider or a mix of NextDNS + another DNS...
DoH_c2_Trigger
DoHc2Trigger Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...
dnscrypt-proxy
Overview A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 including Post-Quantum DNSCrypt DNSCrypt 2026, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH Oblivious DoH. dnscrypt-proxy documentation ← Start here DNSCrypt project home page Discussions...
ddoor
ddoor backdoor multiplataforma que utiliza registros txt de dns ¿Qué es ddor? ddor es un backdoor ligero y multiplataforma que utiliza registros txt para ejecutar comandos en máquinas infectadas. Características Permite que un único registro txt tenga comandos separados para máquinas linux y...
zoshrinkC2
MeliziaC2 DNS over HTTPS targeted malware only runs once ! Some functions are not available yet ! ! WIP, don't use in production ! Key Features Auto-delete malware on failure Fully encrypted per victim RSA key DoH DNS-over-HTTPS communication Malware only runs once! Diagram Images Requires...
DoHC2
⚠️ NOTE: This tool is no longer under active maintenance. DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson https://github.com/ryhanson/ExternalC2 to be leveraged for command and control C2 via DNS over HTTPS DoH. This is built for the popular Adversary Simulation and Red Team Operations...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...
Security update for bind
This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...
Linux Distros Unpatched Vulnerability : CVE-2026-40208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...
SUSE CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...
GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...
GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns
CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...
CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
