webstor

WebStor 조직 내 취약한 웹 기술의 신속한 식별 WebStor는 MIT 라이선스 하에 Python으로 구현된 도구로, 조직의 모든 네트워크에 걸쳐 모든 웹사이트를 신속하게 열거하고, 해당 응답을 저장하며, 제로데이 취약점이 있는 것과 같은 알려진 웹 기술 및 버전을 쿼리하기 위한 도구입니다. 특히 중대형 규모의 분산 관리 조직에서 여러 관리자가 각기 다른 부서와 네트워크에 배포한 모든 웹 기술을 추적하는 것이 거의 불가능한 고유한 문제를 해결하기 위해 설계되었습니다. WebStor는 다음 작업을 수행하여 목표를 달성합니다...

netscout

NetScout NetScout は、指定されたシード URL に対してドメイン、サブドメイン、ディレクトリ、エンドポイント、ファイルを発見する OSINT ツールです。 以下のコンポーネントで構成されています: BinaryEdge クライアント: サブドメインを取得します DNS: DNS ゾーントランスファーを実行してサブドメインを抽出します クローラー: シード URL から URL とディレクトリを取得します SERP クライアント: ファイルへのリンクを取得します。クローラーが見つけたファイル拡張子に基づいて、特定のファイルタイプを検索するために Google dorkin...

dns-zone-transfer-test

DNS 영역 전송 테스트 DNS도메인 이름 시스템 영역 전송 테스트를 자동화합니다. 주어진 도메인의 네임서버를 자동으로 찾아 영역 전송을 테스트하고, 성공하면 확인된 A 레코드를 표준 출력에 출력합니다. 사용법 root@kitploit: dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1 zonetransfer.me 요구사항 root@kitploit: git = 2.36.0 python = 3.9 pip = 20.3.4 시스템 설치 없이 사용하기 필요한 시스템 패키지가 설치되어...

CVE-2026-71194

A flaw was found in the OpenStack Designate mDNS NOTIFY handler. The handlenotify method performs zone lookups without poolid scoping, unlike the QUERY and AXFR handlers which were previously updated to be pool-aware. When zones with the same name exist across different DNS pools, the storage lay...

SUSE CVE-2026-50248

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint. A malicious actor that can spoof the hostname's A/AAAA record no valid RRSIG required becomes the zone'...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the transfer. An attacker can cause a panic and disrupt DNS service availability by sending an AXFR request to a zone configured with k8sexternal headless-service zone transfers when a headless service endpoint...

Authorization Bypass

libbind9.so is vulnerable to authorization bypass. A malicious user can trigger a TSIG authentication error to cause an unauthorized DNS zone transfer or other DNS transactions. This vulnerability only applies to DNS servers using bind that have no-address based ACL in place...

Knockpy - Enumerate Subdomain Scanner

Knockpy is a python tool designed to enumerate subdomains on a target domain through a wordlist. It is designed to scan for DNS zone transfer and to try to bypass the wildcard DNS record automatically if it is enabled. Now knockpy supports queries to VirusTotal subdomains, you can setting the...

DNS Analysis Tool: Bluto

The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto will attempt to identify if SubDomain Wild Cards are being used. If they a...

漫游用友集团各大系统

简要描述： 漫游用友集团各大系统 详细说明： 在一个月黑风高的夜晚，用友某员工的集团办公平台账号，悄悄地泄露了。 // Send message Transport transport=session.getTransport; transport.connect"192.168.210.160" , 25, "ch2","1r"; transport.sendMessagemessage,new Addressnew InternetAddress"[email protected]" ; transport.close;...

Batch site DNS zone transfer vulnerability detection-bash shell implemented-vulnerability warning-the black bar safety net

0x00 background The following illustration of eecs. cc author self-built a machine with a private root DNS server, and open the zone transfer permissions, so the results: the cc zone transfer success. The figure is just an experimental verification, the following article started! ! 2 0 1 4 0 5 1 ...

北京亿中邮dns域传送漏洞

简要描述： 一dns域传送漏洞 详细说明： 北京亿中邮dns域传送漏洞 漏洞证明： root@kali: dnsenum eyou.net...

53KF的dns域传送漏洞

简要描述： 又又又一个dns域传送漏洞 详细说明： 53KF企业在线平台dns域传送漏洞 漏洞证明： root@kali: dnsenum 53kf.com...

DNS zone transfer exploit and repair notes-vulnerability warning-the black bar safety net

A, title: DNS zone transfer exploit and fix Second, the DNS transfer of the domain use 2.1 using BT5 tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com you can omit the--enum,here alert note: the host name and the field name to distinguish） Field Name...

Nmap NSE 6.01: dns-zone-transfer

Requests a zone transfer AXFR from a DNS server. The script sends an AXFR query to a DNS server. The domain to query is determined by examining the name given on the command line, the DNS server's hostname, or it can be specified with the dns-zone-transfer.domain' script argument. If the query is...

DNS zone transfer exploit and fix-vulnerability warning-the black bar safety net

In fact, the use of the method is divided into manual and tool two, we can use BT5 the following tools Dnsenum or other tools, hand while you use the nslookup. 1, Using the tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com This can be simple to make u...

DNS domain transfer disclosure vulnerability details-vulnerability warning-the black bar safety net

The zone transfer operation refers to a backup server to use from the main server's data to refresh their zone database. This is running the DNS service provides a certain degree of redundancy, its purpose is to prevent the primary domain name server due to an unexpected fault becomes unavailable...

Nmap NSE net: dns-zone-transfer

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: DNS Zone Transfer

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: DNS Zone Transfer

This script attempts to request a zone transfer AXFR from a DNS server. This is a wrapper on the Nmap Security Scanner's http://nmap.org dns-zone-transfer.nse. OpenVAS Vulnerability Test $Id: gbnmapdnszonetransfer.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap DNS Zone Transfer NSE...