tldfinder

TLDFinder Funzionalità • Installazione • Utilizzo • Esecuzione di tldfinder • Unisciti a Discord Uno strumento semplificato per scoprire TLD privati per la ricerca sulla sicurezza. Funzionalità Lookup DNS basati su TLD Passivi Lookup DNS basati su TLD Attivi Output su STD IN/OUT e in formato...

nextdns

NextDNS CLI-Client NextDNS CLI ist ein Kommandozeilenwerkzeug, mit dem du den DNS-over-HTTPS-Dienst DoH von NextDNS mit erweiterten Funktionen nutzen kannst. Obwohl die fortschrittlichsten Funktionen nur mit NextDNS funktionieren, kann dieses Programm als Client für jeden DoH-Anbieter oder eine...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

PoC de Envenenamento de Cache no BIND 9 - CVE-2025-40778 Visão Geral Conceitual Esta vulnerabilidade permite que um atacante corrompa o cache DNS de um resolvedor BIND, forçando usuários legítimos a serem redirecionados para endereços IP maliciosos sem que eles saibam. A lógica central do ataque:...

ecs_checker

Strumento di rilevamento remoto EDNS Client Subnet ECS - CVE-2025-40766 Questo strumento verifica se un resolver DNS remoto supporta EDNS Client Subnet ECS — un'estensione DNS che potrebbe esporre i sistemi a vulnerabilità di avvelenamento della cache o di perdita di informazioni come...

decode-spam-headers

decode-spam-headers.py Ob Sie versuchen zu verstehen, warum eine bestimmte E-Mail für Ihre täglichen administrativen Aufgaben im SPAM-/Junk-Ordner gelandet ist, oder für Ihre Red-Team-Phishing-Simulationszwecke – dieses Skript hilft Ihnen dabei! Die Idee entstand während der Durchführung einer...

CVE-2026-63311

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

EUVD-2026-64334

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

CVE-2026-63311

NLTK (Python NLP library) versions

CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

EUVD-2026-64335

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63310

NLTK (Natural Language Toolkit) versions before 3.9.3 contain a missing post-download integrity verification flaw in the downloader module . After downloading packages, the module fails to validate file integrity before extraction. An attacker positioned for a man-in-the-middle attack or performi...

CVE-2026-63310 NLTK before 3.9.3 Missing Post-Download Integrity Verification

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

dns_client_fuzzing

Fuzzing o cliente DNS do Microsoft Windows Após a descoberta da vulnerabilidade crítica CVE-2026-41096, decidi tentar a sorte nisso...

yellow

root@kitploit: | | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - einfach Blau hinzufügen Einfache Binärmodifikationen, die einen Canary-Token auslösen, wenn eine Binärdatei ausgeführt wird. Ideal zum Präparieren von Produktionssystemen gegen...

Linux Distros Unpatched Vulnerability : CVE-2026-63310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform...

Linux Distros Unpatched Vulnerability : CVE-2026-63311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. Th...