dnscrypt-proxy

概要 柔軟なDNSプロキシで、DNSCrypt v2（ポスト量子 DNSCrypt（DNSCrypt 2026）を含む）、DNS-over-HTTPS、Anonymized DNSCrypt、ODoH Oblivious DoH といった最新の暗号化DNSプロトコルをサポートします。 dnscrypt-proxy ドキュメント ← ここから始めてください DNSCrypt プロジェクトホームページ ディスカッション DNS-over-HTTPS および DNSCrypt リゾルバ サーバーおよびクライアント実装 DNS スタンプ FAQ 最新リリースをダウンロード...

JudasDNS

Judas DNS ,, 7MMF' 7MM 7MM"""Yb. 7MN. 7MF'.M"""bgd MM MM MM Yb. MMN. M ,MI "Y MM 7MM 7MM ,M""bMM ,6"Yb. ,pP"Ybd MM Mb M YMb M MMb. MM MM MM ,AP MM 8 MM 8I " MM MM M MN. M YMMNq. MM MM MM 8MI MM ,pm9MM YMMMa. MM ,MP M MM.M . MM O MM MM MM Mb MM 8M MM L. I8 MM ,dP' M YMM Mb dM Ymmm9...

dnschef

| | version 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | D O C U M E N T A T I O N DNSChef는 침투 테스터와 악성코드 분석가를 위한 매우 구성 가능한 DNS 프록시입니다. DNS 프록시"Fake DNS"라고도 함는 애플리케이션 네트워크 트래픽 분석 등에 사용되는 도구입니다. 예를 들어, DNS 프록시는 "badguy.com"에 대한 요청을 인터넷 상의 실제 호스트 대신 로컬 머신으로...

LeitWacht

GitLab Runner Leitwacht GitLab Runner CI/CD 컨테이너의 네트워크 이그레스를 강제합니다. Leitwacht는 각 작업 컨테이너가 네트워크에서 접근할 수 있는 대상을 통제하여 공급망 공격이 시크릿을 유출하는 것을 방지합니다. 작동 방식 Leitwacht는 각 노드에서 GitLab Runner와 함께 실행되는 독립형 에이전트입니다. 컨테이너 시작 이벤트를 가로채고, 강제 프리미티브를 연결하며, 모든 네트워크 활동을 중앙 백엔드에 보고합니다. GitLab Runner를 수정할 필요가 없습니다. 강제 ...

LeitWacht Agent

leitwacht-agent https://leitwacht.eu — 정식 저장소: https://gitlab.com/leitwacht/leitwacht-agent. 이슈, MR 및 토론은 GitLab에서 이루어집니다. Pre-1.0. 0.x 시리즈는 사전 안정화 단계입니다. 1.0이 출시될 때까지 마이너 릴리스에는 API, 환경 변수 이름, Helm values.yaml 키 및 규칙 파일 스키마에 대한 호환성이 깨지는 변경 사항이 포함될 수 있습니다. 프로덕션에서는 이미지 다이제스트플로팅 태그가 아님에 고정하세요. 업그레이드...

dnschef-ng

!NOTE これは、@iphelix によって元々書かれた DNSChef の更新版です。 | | v0.7 | | / | | | | | | | / | ' / |/ | ' \ / \ || ' \ / | | | | | | \ | | | | / | | | | | | | ,|| ||/ || | ||| | | || , | / | | / D O C U M E N T A T I O N DNSChef は、ペネトレーションテスターやマルウェアアナリスト向けの、高度に設定可能な DNS プロキシです。DNS プロキシ（別名「Fake...

sdproxy

sdproxy 一个让你真正掌控家庭网络的 DNS 代理。 简介 我曾在“大厂”网络与安全“竞技场”做过多年顾问。DNS 安全过去是、现在也是我的日常工作，同时也是我最喜欢折腾的爱好之一。因为我现在有了孩子，需要做一个负责任的家长，我便主动承担起为他们过滤这个险恶互联网的责任。于是我构建了 sdproxy （Simple DNS Proxy，简单 DNS 代理）。它（某种程度上）把企业级/大厂级的防护、方法和精度带到了家庭网络层面。 该代理使用 Go 编写，可编译为精简的二进制文件，适用于廉价路由器。没有 云订阅，也没有月费。它支持各种 DNS...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy 認証済みコマンドインジェクション CVE-2026-46368 このリポジトリには、luci-app-https-dns-proxy における深刻なOSコマンドインジェクションの脆弱性に対する Proof of Concept PoC エクスプロイトが含まれており、root として任意のコマンド実行が可能になります。 CVE ID: CVE-2026-46368 Exploit-DB: EDB-52521 CVSS: 8.8 v3.1 / 8.7 v4.0 — 高 CWE: CWE-77...

Astra Linux – Vulnerability in connman

A issue was discovered in the DNS proxy of Connman through version 1.40. The TCP server reply implementation creates an infinite loop if no data is received...

CVE-2026-26899

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

CVE-2026-26899

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

EUVD-2026-67101

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

CVE-2026-26899: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

CVE-2026-26899

The luci-app-https-dns-proxy component in OpenWrt PR #15 (prior to 2026-01-17) is vulnerable to arbitrary command execution. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy fails to properly neutralize shell metacharacters in the name parameter, allowing authenticated users t...

PT-2026-82517

Name of the Vulnerable Software and Affected Versions luci-app-https-dns-proxy versions prior to 2026-01-17 Description Authenticated users can execute arbitrary shell commands due to improper handling of shell metacharacters in the name parameter within the setInitAction function located in...

CVE-2026-26899

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

CVE-2026-67352

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...

CVE-2026-67352 luci-app-https-dns-proxy Stored XSS via resolver_url

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...

EUVD-2026-51867

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...

CVE-2026-67352 luci-app-https-dns-proxy Stored XSS via resolver_url

luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolverurl parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the...