DNSlivery

DNSlivery Easy files and payloads delivery over DNS. DNSlivery Acknowledgments Description TL;DR What problem are you trying to solve? How does it work? Requirements Setup DNS Zone DNSlivery Usage Server Target Acknowledgments This project has been originally inspired by PowerDNS and Joff Thyer's...

ROOT-OS-DEBIAN-13-CVE-2026-44690 CVE-2026-44690 in unbound - Patched by Root

Root has patched CVE-2026-44690 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32665 CVE-2026-32665 in unbound - Patched by Root

Root has patched CVE-2026-32665 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-40691 CVE-2026-40691 in unbound - Patched by Root

Root has patched CVE-2026-40691 in the unbound package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root

Root has patched CVE-2026-50252 in the unbound package for Root:Debian:13. Multiple fixed versions available...

StickyExim

StickyExim An Email HoneyPot Features Easy to deploy. The install scripts does all the work. Abuse report are atomaticlly created and sent to the attacking IP owner. Abuse reports are stored with a hash at time of creation incase needed later. Requirements Domain names. One real domain you use fo...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-48205

camel-dns dns. / term Header Injection Reproducer CVE-2026-48205 This project demonstrates a message-header injection in Apache Camel's camel-dns component, tracked as CVE-2026-48205. The DNS producers read their operation parameters — the resolver to query, the name/domain to look up, the record...

53R3N17Y

53R3N17Y Python based script for Information Gathering. To get the details hackertarget.com is used. There is a limit of 100 API calls per day from a single IP address. Update root@kitploit: ----- | | |--o--| ╒ 53R3N17Y ════════════════════════════════════╕ ---------´ │Python based script for...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE This PoC demonstrates how an attacker can chain Orange Tsai's CVE-2024-4577 with DNS rebinding to achieve remote code execution on internal network infrastructure directly through the victim’s web browser. By bypassing Same-Origin Policy SOP and exploiting vulnerable PHP-CGI...

CVE-2020-8277

CVE-2020-8277 For educational purposes only. Quick Run root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version I...

hakrevdns

hakrevdns 小巧、快速、简单的工具，用于大规模执行反向 DNS 查询。 你向它输入 IP 地址，它返回主机名。 这是通过 IP 地址查找属于某公司的域名和子域名的一种有用方法。 安装 root@kitploit: go install github.com/hakluke/hakrevdns@latest 用法 最基本的用法是直接将 IP 地址列表通过管道传给该工具，例如： root@kitploit: hakluke$ prips 173.0.84.0/24 | hakrevdns 173.0.84.110 he.paypal.com. 173.0.84.109...

[SECURITY] Fedora 44 Update: nsd-4.15.1-1.fc44

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

[SECURITY] Fedora 43 Update: nsd-4.15.1-1.fc43

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

CVE-2021-23017-PoC

CVE-2021-23017-PoC python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1...

Important: python3.14-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...