resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

dnsdmpstr

dnsdmpstr API y Cliente no oficial para DNS Dumpster y herramientas IP de HackerTarget.com. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Instalación git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Uso Como utilidad de...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

hakrevdns

hakrevdns IP 주소 대량으로 역방향 DNS 조회를 수행하는 작고 빠르고 간단한 도구입니다. IP 주소를 입력하면 호스트 이름을 반환합니다. 이것은 회사가 보유한 IP 주소에서 해당 회사의 도메인 및 서브도메인을 찾는 유용한 방법이 될 수 있습니다. 설치 go install github.com/hakluke/hakrevdns@latest 사용법 가장 기본적인 사용법은 IP 주소 목록을 도구에 파이프로 전달하는 것입니다. 예를 들어: hakluke$ prips 173.0.84.0/24 | hakrevdns...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

regresshion-check

regresshion-check regresshion-check is a Rust CLI tool to check SSH servers for vulnerability to CVE-2024-6387. It takes in a single IP or multiple IPs/CIDRs separated by newlines in a file. It includes the reverse DNS lookup and version string with any IPs detected as vulnerable. IPs listed in...

EulerOS Virtualization 2.13.1 : rsync (EulerOS-SA-2026-3196)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

CVE-2026-75514

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORERDNS,...

CVE-2026-75514 BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORERDNS,...

EUVD-2026-62699

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

CVE-2026-67189 pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

CVE-2026-67189

pfSense Plus before 26.07 and CE through 2.8.1 render PTR records as unsanitized HTML in Traffic Graphs AJAX responses. An attacker controlling a PTR record who appears as a top talker can execute arbitrary JavaScript in an admin's browser, enabling session hijacking and OS command execution. Fix...

CVE-2026-67189 pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

PT-2026-78647

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 pfSense CE versions prior to 2.8.2 Description A stored cross-site scripting issue exists in the Traffic Graphs top-talkers feature. The system incorporates PTR records pointers used in reverse DNS lookups ...

CVE-2026-67189: Improper Neutralization of Input During Web Page Generation

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

EulerOS 2.0 SP11 : proftpd (EulerOS-SA-2026-3088)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : modsql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER...

EulerOS 2.0 SP13 : proftpd (EulerOS-SA-2026-2988)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltabfetchclientscb in contrib/modwrap2sql.c allows a remote attacker ...

EulerOS 2.0 SP13 : proftpd (EulerOS-SA-2026-3038)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltabfetchclientscb in contrib/modwrap2sql.c allows a remote attacker ...