4nonimizer

4nonimizer を気に入ったら、ぜひご支援をお願いします！ 4nonimizer とは？ これは、インターネット閲覧に使用する公開IPを匿名化するためのbashスクリプトであり、TORネットワークやさまざまなVPNプロバイダー（OpenVPN）（無料・有料を問わず）への接続を管理します。デフォルトでは、複数のVPN接続（.ovpnファイル）が事前設定されており、対応するプロバイダーがサポートしていれば認証情報を自動ダウンロードします。また、300秒ごとに使用した各IPをログファイルに記録します。...

CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy ローカル権限昇格 概要 脆弱性の説明 : dnscrypt-proxy サービスのインストール時、カレントディレクトリ内の実行ファイルを信頼して登録する問題により、悪意のあるバイナリを挿入して権限昇格が可能となる。 影響を受けるバージョン : dnscrypt-proxy v2.0.0-alpha9 v2.1.5 PoC 手法 : バイナリプランティング binary planting 環境構築 root@kitploit: docker compose up --build ビルドおよび実行が完了するとコンテナが作成される...

NetSet

NetSet 運用セキュリティユーティリティと自動化ツール。バージョン 1.1.0 NetSetは、ユーザーがネットワークトラフィックを保護するための多数の操作を自動化するように設計されています。また、プロキシを簡単に収集し、Tor経由でユーティリティを実行する方法も提供します。 NetSetによってインストールおよび使用されるすべてのユーティリティも自動的に設定されます。もちろん、このツール自体が運用セキュリティのすべてではありません。むしろ、基本を簡単にセットアップできる便利な方法です。 NetSetは、とりわけ以下の機能を提供します。...

pentestproxy

PentestProxy 使用 RedSocks 和 DNScrypt 构建隐蔽渗透测试基础设施的脚本。 概述 本仓库包含一组 Bash 脚本，用于协助设置透明代理基础设施。它通过 RedSocks 将流量路由到 SOCKS5 代理，并通过 DNScrypt 加密 DNS 查询。 原始来源： CPH-SEC/CPH-SEC.github.io 要求 Linux（基于 Debian/Ubuntu） 超级用户权限（sudo） python3 iptables nano（或任意编辑器） curl 安装 1. 安装依赖： 运行安装脚本来设置 dnscrypt-proxy 和 resolvconf...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

OESA-2026-3335 unbound security update

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...

OESA-2026-3334 unbound security update

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...

CVE-2026-55990

A flaw was found in Unbound when configured with DNSCrypt support. An unauthenticated remote attacker could exploit a faulty configuration, where an imbalance between DNSCrypt provider certificate and secret key files leads to memory corruption. By sending a specially crafted network request, the...

SUSE CVE-2026-40691

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger th...

SUSE CVE-2026-55990

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...

Linux Distros Unpatched Vulnerability : CVE-2026-40691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply...

Linux Distros Unpatched Vulnerability : CVE-2026-55990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt- provider-cert:' files than there are matching...

CVE-2026-40691

A flaw was found in Unbound, a domain name system DNS resolver. When Unbound is configured with DNSCrypt support, a remote attacker could send a specially crafted DNSCrypt query over TCP. This malicious query could cause a memory error, leading to a server crash and a Denial of Service DoS. This...

CVE-2026-55990

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...

CVE-2026-55990

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...

CVE-2026-40691

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger th...

CVE-2026-40691

In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger th...

unbound: NLnet Labs Unbound: Denial of Service via faulty DNSCrypt configuration

A flaw was found in Unbound when configured with DNSCrypt support. An unauthenticated remote attacker could exploit a faulty configuration, where an imbalance between DNSCrypt provider certificate and secret key files leads to memory corruption. By sending a specially crafted network request, the...

unbound: Unbound: Denial of Service via crafted DNSCrypt query

A flaw was found in Unbound, a domain name system DNS resolver. When Unbound is configured with DNSCrypt support, a remote attacker could send a specially crafted DNSCrypt query over TCP. This malicious query could cause a memory error, leading to a server crash and a Denial of Service DoS. This...

CVE-2026-55990 Packet of death for a DNSCrypt misconfigured Unbound

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...