MITMer

MITMer 이 도구는 다음을 수행할 수 있습니다: 특정 호스트 또는 모든 LAN 호스트에 대한 MITM 공격. 공격 대상 호스트의 HTTP 및 DNS 활동 표시. 웹사이트에 대한 DNS 쿼리를 드롭하고 PC로 리디렉션합니다. 해당 웹사이트를 가짜 페이지로 변환하고 PC에서 호스팅합니다. 의존성: python2 scapy python2-nfqueue 예시: 모든 호스트를 공격하고 HTTP 트래픽을 표시하며 www.somewebsite.com에 대한 가짜 페이지를 생성합니다: root@kitploit: sudo ./mitmer....

puredns

Быстрый резолвер доменов и инструмент для брутфорса поддоменов с точной фильтрацией wildcard-записей Начало работы » Использование · Как это работает · Спонсорство · ЧаВО О программе puredns — это быстрый резолвер доменов и инструмент для брутфорса поддоменов, который может точно отфильтровывать...

JudasDNS

Judas DNS root@kitploit: ,, 7MMF' 7MM 7MM"""Yb. 7MN. 7MF'.M"""bgd MM MM MM Yb. MMN. M ,MI "Y MM 7MM 7MM ,M""bMM ,6"Yb. ,pP"Ybd MM Mb M YMb M MMb. MM MM MM ,AP MM 8 MM 8I " MM MM M MN. M YMMNq. MM MM MM 8MI MM ,pm9MM YMMMa. MM ,MP M MM.M . MM O MM MM MM Mb MM 8M MM L. I8 MM ,dP' M YMM Mb dM Ymmm9...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation. Mitigation Upgrade the nltk...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

UBUNTU-CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

EUVD-2026-64335

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63310

NLTK (Natural Language Toolkit) versions before 3.9.3 contain a missing post-download integrity verification flaw in the downloader module . After downloading packages, the module fails to validate file integrity before extraction. An attacker positioned for a man-in-the-middle attack or performi...

CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

Linux Distros Unpatched Vulnerability : CVE-2026-63310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform...

Important: Red Hat Security Advisory: ldns security update

An update for ldns is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: ldns security update

An update for ldns is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.

Summary netty-resolver-dns-4.2.13.Final.jar is used by IBM Sterling Connect:Direct Web Services CVE-2026-45673, CVE-2026-45674, CVE-2026-47691. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior t...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)

Summary Netty is used by IBM UrbanCode Deploy UCD for network communication. CVE-2026-45673, CVE-2026-45674, CVE-2026-47691. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Eclipse Netty and Eclipse Vert.x Vulnerability Details CVEID:CVE-2026-45416 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and...

EUVD-2026-31083

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such records. If an adversary is able to attach such...

CVE-2026-47107

Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authenticated users to write arbitrary entries to /etc/hosts, /etc/resolv.conf, and...

Windmill 安全漏洞

Windmill is a low-code development platform open source by Windmill Labs, Inc. Versions of Windmill prior to 1.703.2 contained security vulnerabilities. These vulnerabilities stemmed from the binding and mounting of directories under /etc in the nsjail sandbox configuration file without any...