CVE-2026-34207

CVE-2026-34207 تحقق مرشح SSRF من نص اسم المضيف، ولكن الوجهة الفعلية تم تحديدها لاحقًا بواسطة DNS. سمحت هذه الفجوة لعناوين Webhook التي يتحكم فيها المهاجم بالوصول إلى loopback وبيانات التعريف وأهداف الشبكة الخاصة. مقدمة عثرت على هذه المشكلة أثناء مراجعة Typebot ، منصة بناء روبوتات محادثة مفتوحة...

opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...

gopassivedns

gopassivedns Netzwerkbasiertes DNS-Logging in Go Zusammenfassung Ein netzwerkerfassungsbasierter DNS-Logger, inspiriert von https://github.com/gamelinux/passivedns. Er verwendet gopacket für libpcap und Paketverarbeitung. Er gibt JSON-Logs aus. Er ist für die Erfassung hoher Abfragevolumina in...

awesome-attack-surface-management

Awesome Angriffsflächenmanagement Eine kuratierte Liste von Tools, Ressourcen und Best Practices für das Angriffsflächenmanagement Attack Surface Management, ASM, externes Angriffsflächenmanagement External Attack Surface Management, EASM und kontinuierliche Sicherheitsüberwachung...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

s3dns

S3DNS s3dns è un server DNS leggero che aiuta a scoprire bucket di cloud storage AWS S3, Google Cloud Storage e Azure Blob risolvendo richieste DNS, tracciando i CNAME e confrontando i pattern URL noti dei bucket. È un pratico compagno per pentester , cacciatori di bug bounty e analisti di...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation root@kitploit: go install github.com/koenrh/s3enum@lates...

ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent

root@kitploit: |\ |\ |\ |\ |\ |\ \ |\ |\ \ \ \ | \ \ \\ \ \ |\ \ \ || \ | \ \ |||\ \ \ \ \ \ \ \ \ \\ \ \ \ \ \ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ ||\ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ \ \ \ \ \\ ||||||||\ || ||| || Implant C2 fileless in puro Assembly x64 che...

Hulios

Hulios Sistema Onion e Invisibilità Linux Universale Indurito Hulios è un gateway VPN Tor trasparente per Linux basato su eBPF. Protegge il traffico di rete in uscita reindirizzando i socket TCP e le query DNS attraverso un'istanza integrata di Arti client Tor e un resolver DNS localizzato basato...

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap...

EasyScan

EasyScan EasyScan è uno script Python che analizza la sicurezza di un dato sito web ispezionando le sue intestazioni HTTP, record DNS e altre configurazioni. Lo script genera un report di sicurezza con un punteggio, un voto e raccomandazioni per affrontare potenziali vulnerabilità. Funzionalità e...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

mxmap

MXmap — mappe dell'infrastruttura email comunale !IMPORTANT MXmap ha un successore. Questo progetto è diventato un'iniziativa di ricerca di gruppo che copre tutti i comuni di Germania, Austria e Svizzera: secassure2026.mxmap-project.org sorgente. La mappa svizzera su mxmap.ch resta online, ma i...

MAL-2026-14390 Malicious code in amundi-compare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...

MAL-2026-14391 Malicious code in fund-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5f9f0536151a173aa211b9b5f2972e68aee3043132adccdb3695947b16672 Package declares a preinstall script node index.js that fires unconditionally on npm install. index.js reads installer-side identifiers via...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

DNS-Poisoning-Triage-Lab

Laboratório de Triagem de Tráfego DNS e ARP Um exercício educacional de análise de pacotes e fortalecimento de resolvedor realizado em uma estação de trabalho Arch Linux. Escopo: Este repositório é um projeto de aprendizado. A captura incluída é útil para praticar inspeção de DNS e ARP, mas não...

DNSlivery

DNSlivery Consegna semplice di file e payload tramite DNS. DNSlivery Riconoscimenti Descrizione TL;DR Quale problema stai cercando di risolvere? Come funziona? Requisiti Configurazione Zona DNS DNSlivery Utilizzo Server Target Riconoscimenti Questo progetto è stato originariamente ispirato da...