258 matches found
typodetect
TypoDetect 此工具为蓝队、安全运营中心（SOC）、研究人员和公司提供检测其域名活跃变异的能力，从而阻止这些域名被用于欺诈活动（如钓鱼和短信钓鱼）。 为此，TypoDetect 允许使用 IANA 网站上发布的最新版 TLD（顶级域名）、验证区块链 DNS 中的去中心化域名以及 DoH 服务（基于 HTTPS 的 DNS）中的恶意软件报告。 为了方便用户，TypoDetect 默认以 JSON 格式返回报告，也可根据用户选择以 TXT 格式返回，并在屏幕上显示生成的变异摘要、活跃域名以及检测到的恶意软件或去中心化域名报告。 安装 克隆此仓库： root@kitploit: git...
dnscrypt-proxy
Descripción general Un proxy DNS flexible, con soporte para protocolos DNS cifrados modernos como DNSCrypt v2, incluyendo DNSCrypt Post-Quantum DNSCrypt 2026, DNS-over-HTTPS, DNSCrypt Anonimizado y ODoH Oblivious DoH. Documentación de dnscrypt-proxy ← Empieza aquí Página principal del proyecto...
DoH_c2_Trigger
DoHc2Trigger Código para el artículo del blog: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...
nextdns
NextDNS CLI Client NextDNS CLI is a command-line tool that allows you to use NextDNS's DNS-over-HTTPS DoH service with advanced capabilities. Although the most advanced features will only work with NextDNS, this program can work as a client for any DoH provider or a mix of NextDNS + another DNS...
godoh
🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...
libredns.gr
DNS - over TLS/HTTPS Support Join License...
ddoor
ddoor 使用DNS TXT记录的跨平台后门 什么是ddor? ddor 是一个跨平台轻量级后门，使用TXT记录在受感染机器上执行命令。 特性 允许单个TXT记录为Linux和Windows机器分别设置命令 大约10个公共DNS服务器的列表，随机选择 不可预测的回调时间 使用自定义密码的XOR加密TXT记录 支持DNS over HTTPS（感谢Keith @keharv添加此功能！） Linux特性: 反调试，如果检测到ptrace附加到进程，它将退出。 进程名称/线程名称被隐藏，一个假名称覆盖所有系统参数和文件名，使其看起来像合法程序。 自动守护进程化...
zoshrinkC2
MeliziaC2 Malware mirato via DNS over HTTPS viene eseguito solo una volta ! Alcune funzioni non sono ancora disponibili ! ! WIP, non usare in produzione ! Caratteristiche principali Auto-eliminazione del malware in caso di errore Comunicazione DoH DNS-over-HTTPS completamente crittografata chiave...
DoHC2
⚠️ NOTA: questo strumento non è più in manutenzione attiva. DoHC2 DoHC2 consente di utilizzare la libreria ExternalC2 di Ryan Hanson https://github.com/ryhanson/ExternalC2 per il command and control C2 tramite DNS over HTTPS DoH. È stato creato per il popolare software di Adversary Simulation e Re...
NSEC3-X
DISCLAIMER: Questo progetto è stato generato da Intelligenza Artificiale AI ma ha subito un rigoroso processo "Human-in-the-Loop" HITL. Ciò significa che il codice è stato revisionato e rifattorizzato da un ingegnere del software umano, la progettazione architetturale è stata diretta dall'uomo, e...
SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...
Security update for bind
This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...
Linux Distros Unpatched Vulnerability : CVE-2026-40208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...
SUSE CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...
GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...
GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns
CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...
CVE-2026-40208
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...
