resolvers

Resolvers La lista más exhaustiva de resolvers DNS fiables resolvers.txt: Una lista simple de direcciones IP de resolvers, que puedes pasar directamente a tu herramienta de enumeración DNS. resolvers-extended.txt: Todos los resolvers de resolvers.txt con información adicional sobre cada servidor,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC Proof-of-concept for a remotely triggerable heap buffer overflow in Knot Resolver's DNS-over-QUIC DoQ receive path that yields remote code execution as the knot-resolver service user. Component: kresd DoQ listener daemon/quicconn.c...

CVE-2022-42889

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

decode-spam-headers

decode-spam-headers.py Ya sea que estés tratando de entender por qué un correo electrónico específico terminó en SPAM/Correo no deseado para tus tareas administrativas diarias o para tus propósitos de simulación de phishing Red-Team, ¡este script está ahí para ayudarte! La idea surgió al realizar...

OESA-2026-3666 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass...

OESA-2026-3667 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass...

OESA-2026-3634 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

CVE-2024-10914

CVE-2024-10914 Prueba de Vulnerabilidad de Inyección de Comandos para D-Link NASManual testing with burpsuite Dork para encontrar dispositivos vulnerables Utilice el siguiente dork de búsqueda para encontrar dispositivos D-Link NAS potencialmente vulnerables: root@kitploit: FOFA:...

astDoS

astDoS Herramienta para explotar CVE-2018-7284 y CVE-2018-19278 Uso Esta herramienta se usa como un comando. root@kitploit: astDoS.py -h -a 1,2 -sA SERVERIP -sP SERVERPORT -u USER -p PASSWD -sub SUBUSER -dA DNSIP -dP DNSPORT -v VERSION Ataque DoS contra Asterisk, CVE-2018-7284 y CVE-2018-19278...

Citrix-NetScaler-Memory-Leak-CVE-2025-5777

CVE-2025-5777 – Citrix NetScaler Memory Leak Updated PoC This repository contains an updated Proof-of-Concept PoC for exploiting CVE-2025-5777 – a memory leak vulnerability affecting Citrix NetScaler. The original PoC by 0xgh057r3c0n works perfectly, but some users reported connection errors due ...

CVE-2020-1350

Esto es un ejercicio educativo para honeypot . Úsalo bajo tu propio riesgo. CVE-2020-1350 Vulnerabilidad DNS - CVE-2020-1350 Binario de Windows PoC ./cve20201350.exe...

CVE-2026-50980

CVE-2026-50980: Cross-Site Scripting XSS basado en DNS y secuestro de sesión en oPanel Resumen ID de CVE: CVE-2026-50980 Producto: oPanel Versiones afectadas: v1.20.25 Tipo de vulnerabilidad: Cross-Site Scripting XSS almacenado vía DNS / Secuestro de sesión Severidad: Alta...

yellow

root@kitploit: | | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - just add blue Simple binary modifications that will trigger a canarytoken when a binary is executed. Ideal for boobytrapping production systems against attackers. Currently there are...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

EVIL-CVE-2021-23017-Update-2025

vulnerabilidad en servidores NGINX versiones 0.6.18–1.20.0. Los scripts tienen como objetivo causar una Denegación de Servicio DoS mediante el envío de respuestas DNS maliciosas, con mejoras para evadir firewalls. Esta es una versión mejorada del PoC original de M507/CVE-2021-23017-PoC. Advertenc...

EUVD-2026-71791

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

Fedora 46 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-08a5c52d65)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-08a5c52d65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

Linux Distros Unpatched Vulnerability : CVE-2026-86098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer...

czds

CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...

dark-doh

dark-doh.exe public version Purpose: Download files via DoH, or download and execute a shellcode not implemented in the public version Run example: dark-doh.exe file1 download google yourdomain.com The supporting python script for DNS zone generation added py-prepzones.py. !!! Disclaimer !!! The...