Responder

⛔ 已弃用 当前活跃版本位于 https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS 投毒工具 作者：Laurent Gaffie http://www.spiderlabs.com 简介 Responder 是一个 LLMNR、NBT-NS 和 MDNS 投毒工具。它会根据名称后缀来回应 特定 的 NBT-NS（NetBIOS 名称服务）查询（参见：http://support.microsoft.com/kb/163409）。默认情况下，该工具仅回应文件服务器服务请求，即 SMB。...

Responder

Responder Responder 是一个 LLMNR、NBT-NS 和 MDNS 毒化工具，内置针对 HTTP、SMB、MSSQL、FTP、LDAP、Kerberos、DNS 等协议的虚假认证服务器。它支持 NTLMv1/NTLMv2/LMv2、扩展安全 NTLMSSP 以及超过 15 种协议的各种认证方法。 目录 概述 新增内容 安装 快速开始 网络毒化 虚假服务器 配置 macOS 故障排除 概述 Responder 通过响应 LLMNR、NBT-NS 和 MDNS 名称解析请求来捕获凭证。当客户端尝试解析不存在的主机名时，Responder...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

快速安全扫描器/检查 对社区的一点小贡献 : 我们在安全评估和漏洞监控服务中使用了所有这些工具。 检查域名的 DNS NS 接管 仓库 docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover 缓存投毒 仓库 docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e DOMAIN=site.com whitespots/wcdxss 通过 Meta 标签实现的...

subjack

subjack DNS 子域名接管扫描器 Subjack 是一个用 Go 编写的 DNS 接管扫描器，旨在并发扫描域名列表，并识别出可被劫持的域名。借助 Go 的速度和效率，该工具在大规模测试中表现尤为突出。请务必手动复核结果以排除误报。 Subjack 可检测： CNAME 接管 — 指向未认领第三方服务的悬挂 CNAME 记录 NS 委派接管 — 已过期的域名服务器域名和悬挂的云 DNS 区域（Route 53、Google Cloud DNS、Azure DNS、DigitalOcean、Vultr、Linode） 过时的 A 记录 —...

got-responded

root@kitploit: | |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to...

got-responded

| |/ | | | | | |||| |/ | \ | || \ ||| \ | | || || || || \ | |-.-. | || || | || ||| \ | |/ || ||||| ||| /| /|| /| || / 作者: @wm 一个简单的工具，用于检测 NBT-NS 和 LLMNR 欺骗（并稍微捣乱一下它们） 这是什么？ 渗透测试人员、红队成员甚至真正的攻击者都喜欢使用 Responder 之类的工具来欺骗 LLMNR 和/或 NBT-NS 响应。有一些很棒的其他工具可以帮助检测，例如...

CVE-2020-1350

CVE-2020-1350 SIGRed 拒绝服务 PoC 漏洞利用 本仓库包含我编写的针对 SIGRed 漏洞的 DoS PoC 漏洞利用版本，该漏洞由微软和 Check Point Research 于 2020 年 7 月 14 日披露。 @maxpl0it 也编写了一个 PoC 并于 7 月 15 日发布，但我对漏洞利用的构建方式与他们略有不同，因此我认为发布此工具仍能带来价值——帮助蓝队提升检测能力，并提供另一组可供测试的数据。 该仓库还包含一个 PCAP 文件，展示了该漏洞利用在网络上的表现形式。 实验环境 我尝试搭建必要的域以进行公开测试，但在使 NS...

EUVD-2026-85702

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A path traversal vulnerability exists in the OpenShift console within the i18n locale handler . An unauthenticated attacker can manipulate the lng and ns query parameters in the /locales/resource.json endpoint to read sensitive *.json files from the pod filesystem, such as configuration files and...

CVE-2026-75887 Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

EulerOS Virtualization 2.10.0 : unbound (EulerOS-SA-2026-3891)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks tha...

EulerOS Virtualization 2.10.1 : unbound (EulerOS-SA-2026-3857)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks tha...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2026-3725)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend...

AZL-103332 CVE-2026-78301 affecting package bind 9.20.26-1

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-78301

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-78301

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-78301

CVE-2026-78301 affects ISC BIND 9 (named). A malformed zone containing an NS or DNAME node above its origin is incorrectly treated as a zone cut. An attacker who inserts such a zone into a BIND authoritative server (e.g., via zone transfer) causes queries for names inside the zone to lose authori...

CVE-2026-78301: Acceptance of Extraneous Untrusted Data With Trusted Data

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...