VegaDNS - axfr_get RCE Detection

Detects VegaDNS command injection via /axfrget?domain=;cat+/etc/passwd;. !/usr/bin/env python3 -- coding: utf-8 -- """VegaDNS axfrget command injection.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'VegaD...

VegaDNS Remote Command Injection Vulnerability

VegaDNS is a tinydns management tool written in PHP to facilitate DNS administration via web browser logging. VegaDNS suffers from a remote command injection vulnerability. As the file axfrget/php allows unauthenticated access, fails to properly apply input to all variables that are being used...