nhi-zero-trust-bypass

Project: Exploiting Protocol Vulnerabilities to Manipulate NHI Secrets and Bypass Zero-Trust Policies Screenshots Below are real screenshots from the demonstration. For more, see screenshots/README.md. 1. DNS Exploit BIND Crash A. Exploit Packet Sent Scapy sends a malformed TSIG DNS packet to BIN...

CVE-2025-40775

CVE-2025-40775 affects ISC BIND 9, specifically versions 9.20.0–9.20.8 and 9.21.0–9.21.7. The root cause is an invalid value in the TSIG algorithm field in an incoming DNS message, which causes BIND to abort with an assertion failure. The impact is remote denial of service via crafted TSIGs. A fi...