Lucene search
+L

261 matches found

Kitploit
Kitploit
added 2026/09/17 12:02 p.m.14 views

typodetect

TypoDetect This tool gives blue teams, SOC's, researchers and companies the ability to detect the active mutations of their domains, thus preventing the use of these domains in fraudulent activities, such as phishing and smishing. For this, Typodetect allows the use of the latest available versio...

6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/17 8:00 a.m.8 views

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium ISC has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS DoH. A sender with no credentials can crash the...

7.5CVSS0.00486EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 7:57 a.m.11 views

DoH_c2_Trigger

DoHc2Trigger Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 6:54 a.m.12 views

nextdns

NextDNS CLI Client NextDNS CLI is a command-line tool that allows you to use NextDNS's DNS-over-HTTPS DoH service with advanced capabilities. Although the most advanced features will only work with NextDNS, this program can work as a client for any DoH provider or a mix of NextDNS + another DNS...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:23 p.m.15 views

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 8:43 p.m.15 views

dnscrypt-proxy

概述 一个灵活的 DNS 代理,支持现代加密 DNS 协议,如 DNSCrypt v2(包括 Post-Quantum DNSCrypt DNSCrypt 2026)、DNS-over-HTTPS、Anonymized DNSCrypt 和 ODoH Oblivious DoH。 dnscrypt-proxy 文档 ← 从这里开始 DNSCrypt 项目主页 讨论 DNS-over-HTTPS 与 DNSCrypt 解析器 服务器与客户端实现 DNS 印章 常见问题 下载最新版本 提供源代码和预编译二进制文件,适用于大多数操作系统和架构(见下文)。 功能 DNS 流量加密与认证。支持使用...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 5:17 p.m.15 views

libredns.gr

DNS - over TLS/HTTPS Support Join License...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/09/16 2:17 p.m.5 views

CVE-2026-77692

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

7.5CVSS0.0048EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 1:55 p.m.6 views

EUVD-2026-80766

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

7.5CVSS5.6AI score0.0048EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 7:34 a.m.7 views

ddoor

ddoor クロスプラットフォームのバックドア。DNS TXTレコードを使用します。 ddoorとは? ddorは、TXTレコードを使用して感染したマシン上でコマンドを実行する、クロスプラットフォームの軽量バックドアです。 機能 1つのTXTレコードでLinuxとWindows両方のマシンに対して別々のコマンドを指定可能 約10のパブリックDNSサーバーのリストからランダムに選択 予測不能なコールバック時間 カスタムパスワードによるXOR暗号化でTXTレコードを暗号化 DNS over HTTPSをサポート(Keith @keharvに感謝!) Linuxの機能:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:44 p.m.13 views

zoshrinkC2

MeliziaC2 DNS over HTTPS targeted malware only runs once ! Some functions are not available yet ! ! WIP, don't use in production ! Key Features Auto-delete malware on failure Fully encrypted per victim RSA key DoH DNS-over-HTTPS communication Malware only runs once! Diagram Images Requires...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 12:17 a.m.17 views

NSEC3-X

DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.15 views

DoHC2

⚠️ NOTE: This tool is no longer under active maintenance. DoHC2 DoHC2 allows the ExternalC2 library from Ryan Hanson https://github.com/ryhanson/ExternalC2 to be leveraged for command and control C2 via DNS over HTTPS DoH. This is built for the popular Adversary Simulation and Red Team Operations...

5.7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:00 a.m.16 views

SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...

9.8CVSS6.8AI score0.01874EPSS
SaveExploits1References16
SUSE Linux
SUSE Linux
added 2026/06/29 9:53 a.m.17 views

Security update for bind

This update for bind fixes the following issues CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. CVE-2026-5946: Invalid handling of CLASS != IN bsc1265594. CVE-2026-595...

7.5CVSS5.8AI score0.01874EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
added 2026/06/28 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. CVE-2026-40208 Note that Nessus relies...

3.7CVSS5.8AI score0.00205EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/26 2:19 a.m.20 views

SUSE CVE-2026-40208

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame...

5.3CVSS5.9AI score0.00205EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:00 a.m.22 views

SUSE SLES16: bind / bind-doc / bind-modules-generic / bind-modules-ldap / etc (SUSE-SU-2026:22198-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22198-1 advisory. This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion durin...

9.8CVSS5.8AI score0.01874EPSS
SaveExploits1References19
OSV
OSV
added 2026/06/25 10:34 p.m.13 views

GO-2026-5583 CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns...

8.7CVSS5.8AI score0.00374EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/25 6:26 p.m.13 views

GO-2026-5164 CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns...

8.7CVSS5.8AI score0.00672EPSS
SaveExploits1References3
Rows per page
Query Builder