subjack

subjack DNS अधिग्रहण स्कैनर Subjack एक DNS अधिग्रहण स्कैनर है जो Go में लिखा गया है। इसे डोमेन की एक सूची को एक साथ स्कैन करने और उन डोमेन को पहचानने के लिए डिज़ाइन किया गया है जिन्हें हाइजैक किया जा सकता है। Go की गति और दक्षता के कारण, यह उपकरण बड़े पैमाने पर परीक्षण में वास्तव में अलग दिखता है...

Responder

Responder Responder एक LLMNR, NBT-NS, और MDNS पॉइज़नर है जिसमें HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, और अधिक के लिए बिल्ट-इन रॉग ऑथेंटिकेशन सर्वर हैं। यह NTLMv1/NTLMv2/LMv2, एक्सटेंडेड सिक्योरिटी NTLMSSP, और 15+ प्रोटोकॉल में विभिन्न प्रमाणीकरण विधियों का समर्थन करता है। Table of Contents...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

ماسحات/فحوصات أمنية سريعة مساهمة صغيرة للمجتمع : نستخدم كل هذه الأدوات في تقييمات الأمن وفي خدمة مراقبة الثغرات الخاصة بنا تحقق من نطاقك لاستيلاء DNS NS المستودع docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover تسميم ذاكرة التخزين المؤقت المستودع docker...

got-responded

| |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to use tools like...

got-responded

| |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ लेखक: @wm NBT-NS और LLMNR स्पूफिंग का पता लगाने और उनके साथ थोड़ा छेड़छाड़ करने के लिए एक सरल उपकरण यह क्या है? पेंटेस्टर्स, रेडटीमर्स और यहां तक कि वास्तविक हमलावरों को...

CVE-2020-1350

CVE-2020-1350 SIGRed सेवा अस्वीकार PoC शोषण इस रेपो में 14 जुलाई, 2020 को MS और Check Point Research द्वारा खुलासा किए गए SIGRed भेद्यता के लिए DoS PoC शोषण का मेरा संस्करण है। @maxpl0it ने भी एक PoC लिखा जिसे उन्होंने 15 जुलाई को प्रकाशित किया, लेकिन मैंने अपने शोषण को उनसे थोड़ा अलग तरीके से...

Responder

⛔ DEPRECADO Ativo em https://github.com/lgandx/Responder Responder.py Envenenador LLMNR/NBT-NS/mDNS Autor: Laurent Gaffie http://www.spiderlabs.com Introdução O Responder é um envenenador LLMNR, NBT-NS e MDNS. Ele responderá a consultas específicas de NBT-NS NetBIOS Name Service baseadas no sufix...

PT-2026-107529

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stun init error response common str function in src/client/ns turn...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

Rocky Linux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1780312843)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780312843 advisory. - NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that...

AlmaLinux 9.6 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc (ALMALINUX9.6:CLSA-2026:1780312843)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780312843 advisory. - NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complemen...

CVE-2026-102876 SurrealDB before 3.3.0 Cross-Tenant Access via Headers

SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where checkauth verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but constructs sessions using Surreal-NS and Surreal-DB headers without validating access permissions. Attackers can...

CVE-2026-102876: Authorization Bypass Through User-Controlled Key

SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where checkauth verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but constructs sessions using Surreal-NS and Surreal-DB headers without validating access permissions. Attackers can...

PT-2026-98719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NVMe subsystem where the nvme scan ns list function removes stale namespaces one NSID at a time when gaps are found in the reported NSID list. Because NSIDs are...

PT-2026-98635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nstree component where the legitimize ns function takes a reference to a candidate namespace before the may list ns function determines if the caller has permissio...

EUVD-2026-85702

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

PT-2026-98082

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPICA component of the Linux kernel. The problem occurs due to a lack of validation for the node in the acpi ns build normalized path function, whic...

PT-2026-104989

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi ns custom package acpi ns custom package unconditionally dereferences the first element of the package to read the BIX version number, without checking for NULL: if Elements-Common.Typ...

PT-2026-98080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ACPICA component. The function acpi ns custom package unconditionally dereferences the first element of a package to read the BIX version number...