docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

dnspooq

dnspooq DNSpooq PoC - dnsmasqキャッシュポイズニング CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 教育目的のみ 要件 Docker compose Docker エクスプロイト コンテナの起動 root@kitploit: $ docker-compose up -d exploit.pyの実行 root@kitploit: $ docker-compose exec attacker bash bash-5.0 python exploit.py Querying non-cached names...

access-point

偽装アクセスポイント 管理された環境でのトラフィックキャプチャ用の不正なオープンWi‑Fi AP。hostapd（ネイティブnl80211 APモード）+ dnsmasq（DHCP/DNS）+ iptables NATを使用してアップリンクインターフェースへ転送します。 必要条件 Linux、root。 APモード対応のワイヤレスカード（iw phy → Supported interface modes: ... AP）。 パッケージ: hostapd、dnsmasq、iw、iptables、rfkill、。...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS 改行インジェクションによるリモートコード実行 TL;DR Pi-hole の FTLDNS エンジン（バージョン 6.0 から 6.5）における リモートコード実行 の脆弱性により、認証済みの攻撃者が dns.upstreams API パラメータに 改行文字 （\n）を埋め込むことで、任意の dnsmasq 設定ディレクティブを注入できます。dnsmasq はシェルコマンドを実行するディレクティブをサポートしているため、この改行インジェクションは ホストシステム上での完全なコマンド実行 に直接つながります。...

Netgear_Pwn2Own2021

Netgear R6700v3 WAN RCE - Pwn2Own 2021 これは、Pwn2Own 2021 で Netgear R6700v3 にリモートシェルを取得するために 使用されたコードです。 ブログ記事: https://synacktiv.com/publications/pwn2own-austin-2021-defeating-the-netgear-r6700v3 必要条件 flask 付きの python3 dnsmasq 使用方法 1. ifname をルーターに接続されているインターフェース名 例: eth0 として、root で ./play.sh ifna...

dnsmasq-cve-2026

dnsmasq CVE-2026 QA検証ツール 6件のdnsmasq脆弱性（2026年5月）を検証する自動ブラックボックスツールです。稼働中のDUTに攻撃パケットを送信し、PASS/FAILを報告します。ソースコードへのアクセスは不要です。 クイックスタート root@kitploit: Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python3 dnsmasqcveverify.py --laptop --dut --dut-pass Example: sudo python3...

CVE20265172poc

CVE20265172poc CVE-2026-5172: 細工されたリソースレコードを処理する extractaddresses のバッファオーバーフロー PoC トポロジーはこちら https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 手順 1. vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces...

CVE20264893poc

Topology: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c 手順​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090240 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2023-001151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001151 advisory. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. Tenable h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090164 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received D...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090246 advisory. A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090253 advisory. A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090234)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090234 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received D...

bof-dnsmasq-cve-2017-14493

bof-dnsmasq-cve-2017-14493...

SUSE SLES15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2026:4010-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4010-1 advisory. - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477:...

CLEANSTART-2026-SO35222 Security fix for CVE-2017-14494 applied in: dnsmasq 2.78-r0

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VX51931 Security fix for CVE-2019-14834 applied in: dnsmasq 2.80-r5

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LH68437 Security fix for CVE-2022-0934 applied in: dnsmasq 2.86-r1

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...