got-responded

root@kitploit: | |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ Author: @wm A simple tool to detect NBT-NS and LLMNR spoofing and messing with them a bit What is it? Pentesters, Redteamers and even real attackers love to...

Responder

Responder Responder is a LLMNR, NBT-NS, and MDNS poisoner with built-in rogue authentication servers for HTTP, SMB, MSSQL, FTP, LDAP, Kerberos, DNS, and more. It supports NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP, and various authentication methods across 15+ protocols. Table of Contents...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

subjack

subjack DNS テイクオーバースキャナー Subjack は Go で書かれた DNS テイクオーバースキャナーで、ドメインのリストを同時にスキャンし、乗っ取り可能なものを特定するために設計されています。Go の速度と効率性により、このツールは大量テストにおいて真価を発揮します。誤検知を排除するため、結果は手動で再確認することを推奨します。 Subjack は以下を検出します： CNAME テイクオーバー — 未請求のサードパーティサービスを指す宙ぶらりんの CNAME レコード NS 委任テイクオーバー — 有効期限切れのネームサーバードメイン、および宙ぶらりんのクラウド DN...

got-responded

root@kitploit: | |/ \ | | | | | || || |/ | \ | || \ | || \ | | || || |||| \ | | -.-. | || || | || | || \ ||/ || ||\|||||| /|/||/|||/ 作者: @wm LLMNR/NBT-NSスプーフィングを検出するシンプルなツール（そしてちょっとした妨害も含む） これは何ですか？...

CVE-2020-1350

CVE-2020-1350 SIGRed 拒绝服务 PoC 漏洞利用 本仓库包含我编写的针对 SIGRed 漏洞的 DoS PoC 漏洞利用版本，该漏洞由微软和 Check Point Research 于 2020 年 7 月 14 日披露。 @maxpl0it 也编写了一个 PoC 并于 7 月 15 日发布，但我对漏洞利用的构建方式与他们略有不同，因此我认为发布此工具仍能带来价值——帮助蓝队提升检测能力，并提供另一组可供测试的数据。 该仓库还包含一个 PCAP 文件，展示了该漏洞利用在网络上的表现形式。 实验环境 我尝试搭建必要的域以进行公开测试，但在使 NS...

fast-security-scanners

高速セキュリティスキャナー/チェック コミュニティへの小さな貢献 : これらのツールはすべて、セキュリティ評価と当社の脆弱性モニタリングサービスで使用しています。 DNS NSテイクオーバーのチェック リポジトリ docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover キャッシュポイズニング リポジトリ docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e...

Responder

⛔ DEPRECATED Active at https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Author: Laurent Gaffie http://www.spiderlabs.com Intro Responder an LLMNR, NBT-NS and MDNS poisoner. It will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see:...

CVE-2026-78301

A malformed zone may contain an NS or DNAME node above its origin, whi...

CVE-2026-78301

A malformed zone may contain an NS or DNAME node above its origin, which named treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server e.g., via zone transfer, queries for names inside the configured zone then lose authoritative status and return an...

CVE-2026-78301

CVE-2026-78301 affects ISC BIND 9 (named). A malformed zone containing an NS or DNAME node above its origin is incorrectly treated as a zone cut. An attacker who inserts such a zone into a BIND authoritative server (e.g., via zone transfer) causes queries for names inside the zone to lose authori...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: AppArmor: Fixed a double-free of nsname in aareplaceprofiles. If nsname is NULL after 1071 error = aaunpackudata, &lh, &nsname; and if ent-nsname contains an nsname in 1089 else if ent-nsname then nsname is assigned the value of...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netns: Ensure that getnetns handles zero refcount nets properly. Syzkaller encountered a warning: refcountt: Addition on 0; use-after-free. WARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcountwarnsaturate+0xdf/0x1d0 Linked...

USN-8742-1: Netty vulnerability

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks...

USN-8742-1 netty vulnerability

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks...

PT-2026-89731

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035851 advisory. NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain...

CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

CVE-2026-34967 Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences to write arbitrary .sql files with attacker-controlled content to any writable d...