3378 matches found
cve-2015-7547
PoC attack server for CVE-2015-7547 vulnerability in glibc DNS resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...
fernmelder
fernmelder async mass DNS resolver...
[SECURITY] Fedora 43 Update: rust-hickory-resolver-0.26.2-1.fc43
Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...
numa
Numa DNS you own. Everywhere you go. — numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...
massdns
MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...
dnsglobe
dnsglobe A global DNS propagation checker for your terminal — a Rust TUI that queries 34 public DNS resolvers around the world in parallel, compares their answers, and shows the propagation of your record on a world map. Think dnschecker.org / whatsmydns.net, but in your terminal, with watch mode...
dnsx-action
dnsx Action makes it easy to orchestrate dnsx with GitHub Action. Example Usage GitHub Action runningdnsx on list of hosts root@kitploit: - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action runningdnsx with custom resolvers root@kitploit: -...
Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read
Amazon rabbitmq-aws versions 0.1.0 through 0.2.0 contain active debug code in the ARN resolver. An authenticated RabbitMQ user with management API access can submit an arn:aws-debug:file ARN to the validation endpoint and read arbitrary files accessible to the RabbitMQ process. id: CVE-2026-9133...
ecs_checker
EDNS客户端子网远程检测工具 - CVE-2025-40766 本工具用于检查远程DNS解析器是否支持EDNS客户端子网（ECS） ——这是一个DNS扩展，可能使系统暴露于缓存投毒或信息泄露漏洞（例如CVE-2025-40766）。 🔍 功能简介 发送带有ECS选项的DNS查询 检测目标DNS解析器是否启用了ECS 兼容Linux/macOS Python 和 Windows PowerShell 💻 使用方法 Python 安装依赖： root@kitploit: pip3 install -r requirements.txt 运行脚本： root@kitploit: python...
puredns
快速域名解析与子域名暴力破解工具，支持精准通配符过滤 快速上手 » 用法 · 工作原理 · 赞助 · 常见问题 关于 puredns 是一款快速域名解析与子域名暴力破解工具，能够精准过滤通配符子域名及 DNS 投毒条目。 它基于强大的存根 DNS 解析器 massdns 执行批量查询。在带宽充足且使用良好公共解析器列表的前提下，只需数分钟即可解析数百万条查询。然而，massdns 的结果质量完全取决于公共解析器返回的答案，这些答案常因错误 DNS 响应和通配符子域名的误报而受到污染。 puredns 通过其通配符检测算法解决了这一问题。它能基于从一组可信解析器获取的 DNS...
UnhookMe
UnhookMe - Dynamically unhooking imports resolver In the era of intrusive AVs and EDRs that introduce hot-patches to the running processes for their enhanced optics requirements, modern adversaries must have a robust tool to slide through these watchguards. The propsed implementation of dynamic...
massdns
MassDNS 高性能DNS存根解析器 MassDNS是一个简单的高性能DNS存根解析器，专为需要解析海量域名（数百万甚至数十亿级别）的用户设计。无需特殊配置，MassDNS即可利用公开可用的解析器每秒解析超过35万个域名。 贡献者 Quirin Scheitle，慕尼黑工业大学 编译 克隆Git仓库并cd进入项目根目录。然后运行make从源代码构建。如果你不在Linux上，运行make nolinux。在Windows上，需要Cygwin的gcc-core、git和make包。 用法 root@kitploit: Usage: ./bin/massdns options...
zdns
ZDNS ZDNS 是一个高速 DNS 解析器和命令行工具，用于执行大规模 DNS 测量。ZDNS 使用 Go 语言编写，包含自己的递归解析代码和一个针对多样化名称查询优化的缓存。我们使用 https://github.com/zmap/dns 来构建和解析原始 DNS 数据包。有关 ZDNS 架构和性能的更多信息，请参阅以下发表于 ACM 互联网测量会议 '22 的论文。 !TIP ZDNS Wiki 包含有关 ZDNS 的更多信息，并介绍了用例和示例。 安装 可以通过克隆仓库并运行 make install 来安装 ZDNS。 root@kitploit: git clone...
Hulios
Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...
PR-DNSd
PR-DNSd Passive-Recursive DNS daemon. What does it do Quickstart root@kitploit: go get github.com/korc/PR-DNSd sudo setcap capnetbindservice,capsyschroot=ep go/bin/PR-DNSd go/bin/PR-DNSd -upstream 9.9.9.9:53 -listen 127.0.0.1:53 echo nameserver 127.0.0.1 | sudo tee /etc/resolv.conf dig google.com...
dns_amplification_scanner
DNS Amplification DDoS Detection and Verification Tool This script is designed to identify and verify potential DNS servers vulnerable to exploitation in DNS amplification distributed denial-of-service DDoS attacks. It addresses the limitations of automated vulnerability scanners like Nessus, whi...
CVE-2023-50387
Repository based on https://github.com/knqyf263/CVE-2023-50387 with several modifications: Added resolver-fixed, which has an implementation of Unbound where the vulnerability we discussed is fixed. Created scripts for automating the generation of RRSIG keys. To auto-generate configuration files:...
knot-doq
Knot Resolver 6.3.0 — DNS-over-QUIC 堆溢出 → RCE PoC 针对 Knot Resolver 的 DNS-over-QUIC DoQ 接收路径中可远程触发的堆缓冲区溢出的概念验证，该漏洞可以以 knot-resolver 服务用户身份实现远程代码执行。 组件： kresd DoQ 监听器（daemon/quicconn.c） 影响版本： Knot Resolver 6.3.0（已在 6.3.0-cznic.1bookworm 上验证） 修复版本： Knot Resolver 6.4.1（2026-07-22 发布） 漏洞类型：...