dnschef

root@kitploit: | | versione 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: D O C U M E N T A Z I O N E DNSChef è un proxy DNS altamente configurabile per tester di penetrazione e analisti di malware. Un proxy DNS anche noto come "Fake DNS" è...

DNSSpoof

DNSSpoof Ein DNS-Spoofer-Tool, geschrieben in Python3. Wie benutzt man es? root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default:...

cve-2022-28944

CVE-2022-28944 Sicherheitslücke bezüglich nicht authentifizierter Remote-Codeausführung über Updates in mehreren Produkten von EMCO Software. Verwendung: python3 cve-2022-28944poc.py Details im Bericht auf gerr.re. Schritte zur Reproduktion 1. Installieren Sie ein betroffenes Produkt von EMCO...

WiFi-Pumpkin-deprecated

Questo repository è ⛔️ DEPRECATO, wifipumpkin3 è stato rilasciato, dacci un'occhiata! WiFi-Pumpkin - Framework per attacchi Rogue Wi-Fi Access Point Descrizione WiFi-Pumpkin è un framework per creare facilmente falsi AP Rogue che inoltrano il traffico legittimo verso e dalla vittima ignara. È ricc...

dns-spoof

Questo repository non contiene un README...

Inveigh

Inveigh Inveigh è uno strumento .NET multipiattaforma IPv4/IPv6 per attacchi machine-in-the-middle per penetration tester. Questo repository contiene la versione principale in C e la versione legacy PowerShell. Panoramica Inveigh esegue attacchi di spoofing e cattura di hash/credenziali tramite s...

mitm

mitm Uno script python3 semplice ma efficace per eseguire DNS spoofing tramite ARP poisoning Installazione root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 Schwachstelle bei der Remote-Codeausführung durch den Update-Check 'CustomDetection'. Verwendung: python3 cve-2022-27438poc.py Details im Bericht unter gerr.re. Schritte zur Reproduktion Bei anderen betroffenen Produkten müssen Sie den Updateserv...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Vulnerabilità di esecuzione remota di codice non autenticata tramite aggiornamento Uso: python3 cve-2022-24644poc.py Dettagli nel report su gerr.re. Passaggi per riprodurre 1. Installa KeyMouse Windows 3.08; 2. Imposta lo spoof di www.keymouse.com...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

arp-dns-spoof

Installation auf Debian-basierten Linux-Distributionen Scapy installieren root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy python-NetfilterQueue installieren root@kitploit: % sudo apt-get install build-essential...

mitmAP

root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Attenzione! Questo progetto non è più mantenuto e potrebbe non funzionare come previsto. Un programma Python per creare un falso AP e sniffare dati. novità in 2.0:...

CVE-2026-66787 Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice and serviceimport ips

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

CVE-2026-70465

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute...

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found...

Oracle Linux 9 : ELSA-2026-50108-0: / ldns (ELSA-2026-501080)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501080 advisory. 1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701 Tenable has extracted the...

ldns security update

1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701...

unbound: Unbound: Insecure DNS redirection via spoofed DNS answers

A flaw in Unbound's respip module fails to verify the security status of incoming DNS answers when using response-ip rules or RPZ files. A remote attacker can exploit this by spoofing DNS answers to bypass DNSSEC protections and trigger unauthorized rewrites, redirecting clients to unintended...

CVE-2026-9085

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from =0.5.1 before 0.7.0...

EUVD-2026-41765

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from =0.5.1 before 0.7.0...