Crips

Crips IP Tools This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Menu Whois lookup Traceroute DNS Lookup Reverse DNS Lookup GeoIP Lookup Port Scan Reverse IP Lookup INSTALL & UPDATE Exit Whois lookup Determine...

external_c2

Synopsis Cobalt Strike contains a new / experimental feature called externalc2. This bypasses the mallable profiles and allows the developper to craft it's own channels. This code is a POC, that in the end appeared to be the solution to a real life problem. Code content c2file.c: a C implementati...

LeitWacht

GitLab Runner Leitwacht Network egress enforcement for GitLab Runner CI/CD containers. Leitwacht prevents supply chain attacks from exfiltrating secrets by controlling what each job container can access on the network. How It Works Leitwacht is a standalone agent that runs alongside GitLab Runner...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

CVE-2024-23692

CVE-2024-23692 Usage: go run hfs.go -h go run hfs.go -u http://127.0.0.1 go run hfs.go -u http://127.0.0.1 -dns // default uses ceye.io requires configuration go run hfs.go -u http://127.0.0.1 -dns -d abc.cn // specify dnslog go run hfs.go -u http://127.0.0.1 -cmd // enter command line Tips: DNSL...

EXPLOIT-CVE-2026-42559

CVE-2026-42559 — DNS rebinding in the rmcp Streamable HTTP server transport A self-contained Docker lab and Python proof of concept for CVE-2026-42559 GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189. | ---|--- Affected| rmcp — the official Rust SDK for the Model Context Protocol — 1.4.0 Fixed in| 1.4.0...

inforfinder

Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...

DNSWatch

DNSWatch - DNS Traffic Sniffer and Analyzer DNSWatch is a powerful packet sniffing tool designed to monitor and analyze DNS Domain Name System traffic on a network. This script provides a comprehensive set of features to help users understand and manage DNS activity efficiently. Whether you're a...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

pDNS2

pDNS2 pDNS2 project pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...

NoPacScan

NoPacScan NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than the original script, and more accurate than it.It scan DC with DNS search msdcs.aaa.com,it's better than LDAP and SAMR, and it will automatically scan all DC we find.If you use LDAP or SAMR...

CVE-2021-23017-POC

CVE-2021-23017-POC A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The issue only affects nginx if the "resolver"...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

cve-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit tests to see if a BIND9 server is vulnerable by sending the exploit in order to see if it crashes. It's C code that you compile the normal way on Unix/Window, such as: gcc tkill.c -o tkill It'll run over both IPv4 and IPv6. This is what it...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

NSEC3-Encloser-Attack

NSEC3-Encloser-Attack Zonefile Generation This project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. Requirements Python3 tested on Python3.10 Installed Python dependencies: cryptography 42.0.5 dnspython 2.6.1 Components lib: Python...

RED_HAWK

Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...

assets-from-spf

assets-from-spf A Python script to parse netblocks & domain names from SPFSender Policy Framework DNS record For every parsed asset, the script will also find and print Autonomous System NumberASN details For now, the output is printed in JSON format only Demo Screenshots 3rd party package...