24103 matches found
CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata
CVE-2026-3333 – DNS Rebinding to Steal Cloud Metadata Program Code Python attacker server + vulnerable app root@kitploit: !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, time This simple server...
Log4Shell
log4shell A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for vulnerability...
Massive-Subdomain-Enumerator
Massive-Subdomain-Enumerator This tool uses a combination of dictionary-based wordlists brute-force and DNS resolution checks to verify the existence of subdomains. Features Wordlist Processing: Capable of handling large wordlists efficiently. Multi-threading: Boosts search speed by using multipl...
cupntlm-Automated-Exploit-For-CVE-2025-33073-
cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...
Dashboards-Splunk-DNS-Hunting-Beaconing
DNS Hunting-Beaconing v19.2.0.0 DNS Dashboard for hunting and identifying beaconing This dashboard no longer uses any third-party modules or a Splunk lookup table to identify "Trusted Domains". All of that work has been moved to the Corelight/Zeek sensor. However, the dashboard does use two Splun...
icannTLD
icannTLD Corelight-update can now be used to create and maintain the icannTLD input files. Script Description Zeek script using the official ICANN Top-Level Domain TLD list with the Input Framework to extract the relevant information from a DNS query and mark whether it's trusted or not. The sour...
top-dns
Top DNS Measurement Overview This script uses a built in probabalistic measurement mechanism in Bro to measure the top DNS requests by type of query, i.e., CNAME, A, AAAA, etc being done over a definable period of time. This is logged into a new log named "topdns.log". By using the probabalistic...
CVE-2025-33073
Obscura$ DNS Relay Injector + NTLM Coercion Tool A stealthy proof-of-concept that chains DNS injection, NTLM relay, and RPC-based coercion to test authentication relay paths in Windows Active Directory environments. ⚠️ DISCLAIMER: For authorized security testing and educational use only. ❌...
CVE-2026-78523
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-77505
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-72987
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-72948
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-72928
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-69989
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69858
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69813
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69782
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69730
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...