numa

Numa DNS you own. Everywhere you go. — numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...

cve-2015-7547

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

Hulios

Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...

massdns

MassDNS 高性能DNSスタブリゾルバ MassDNSは、数百万から数十億単位の膨大な数のドメイン名を解決することを目的とした、シンプルで高性能なDNSスタブリゾルバです。特別な設定をしなくても、公開されているリゾルバを使用して、毎秒35万以上の名前を解決できます。 貢献者 Quirin Scheitle、ミュンヘン工科大学 コンパイル Gitリポジトリをクローンし、プロジェクトルートフォルダにcdしてください。そしてmakeを実行してソースからビルドします。Linux以外の場合はmake...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

fernmelder

fernmelder async mass DNS resolver...

dnsx-action

dnsx Action makes it easy to orchestrate dnsx with GitHub Action. Example Usage GitHub Action runningdnsx on list of hosts root@kitploit: - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action runningdnsx with custom resolvers root@kitploit: -...

CVE-2021-23017

CVE-2021-23017 PoC 扫描器 NGINX DNS 溢出漏洞检查 - CVE-2021-23017 PoC 此 Python 脚本检查 nginx 服务器是否可能受到关键漏洞 CVE-2021-23017 的影响，该漏洞影响 nginx 内置的 DNS 解析器 ，可能导致缓冲区溢出。 🔍 它做什么？ 提示用户输入 URL。 发送一个带有恶意（非常长）Host 头的 HTTP 请求。 如果服务器配置了 nginx 的 resolver 并且存在漏洞，则可能会崩溃或在日志中记录错误。 不执行恶意代码 ，仅是一种被动的检测测试。 🚀 如何使用 1. 确保已安装 Python 3。...

DNS-Poisoning-Triage-Lab

DNS 与 ARP 流量分类实验 在 Arch Linux 工作站上完成的网络安全教育性数据包分析及解析器加固练习。 范围： 本仓库是一个学习项目。附带的流量捕获可用于练习 DNS 和 ARP 检查，但它本身不能 证明存在实时的缓存投毒攻击、恶意硬件、对特定 CVE 的利用，或与 NetworkManager 路由度量存在因果关系。 我为何修订此项目 我的第一版分析将若干观察结果视为已确认的成因。那过于武断了。一个 839 字节的 DNS 帧并不自动意味着畸形或恶意，而 DNS-over-TLS 保护的是发往所配置上游解析器的 DNS 流量——它并不能阻止 ARP 欺骗或所有二层/三层攻...

zdns

ZDNS ZDNS は、大規模な DNS 測定を実行するための高速 DNS リゾルバ兼コマンドラインユーティリティです。ZDNS は Go で書かれており、独自の再帰解決コードと、多様な名前のルックアップに最適化されたキャッシュを備えています。生の DNS パケットの構築と解析には、https://github.com/zmap/dns を使用しています。ZDNS のアーキテクチャとパフォーマンスの詳細については、ACM の Internet Measurement Conference '22 で発表された次の論文を参照してください。 !TIP ZDNS Wiki には、ZDNS...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

CVE-2015-7547

CVE-2015-7547 https://github.com/fjserna/CVE-2015-7547 So I tried to see if many things crash on CentOS6. root@kitploit: ./CVE-2015-7547-poc.py & vi /etc/resolve.conf --------------------------------------------------------------- options single-request-reopen nameserver 8.8.8.8 nameserver...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

[SECURITY] Fedora 43 Update: rust-hickory-resolver-0.26.2-1.fc43

Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...

ecs_checker

EDNS Client Subnet ECS Remote Detection Tool - CVE-2025-40766 This tool checks whether a remote DNS resolver supports EDNS Client Subnet ECS — a DNS extension that may expose systems to cache poisoning or information leakage vulnerabilities such as CVE-2025-40766. 🔍 What It Does Sends a DNS query...

CVE-2023-50387

Repository based on https://github.com/knqyf263/CVE-2023-50387 with several modifications: Added resolver-fixed, which has an implementation of Unbound where the vulnerability we discussed is fixed. Created scripts for automating the generation of RRSIG keys. To auto-generate configuration files:...

Fedora 45 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-37e598af67)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-37e598af67 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

gha-lab-6904b2ccbe

自动化研究产物 — 非上游项目。 本仓库是由自动化工具链为拉瓦尔大学（Université Laval）硕士论文构建的一次性实验环境，用于复现已发表的 GitHub Actions 工作流漏洞。它是 serverless-dns/serverless-dns 在提交 b0b1a1538aeb1991b5bc13dfe4e18e686913b12e（2025-04-26）时的逐字快照，依据该项目自身的许可证重新分发，该许可证文件已原样包含在本快照中。 上游项目未 参与其中，也从未...

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...