dig

dig macOS 上のローカル dig ラッパー。実際にクエリを投げるのはシステム標準の /usr/bin/dig のまま。このプロジェクトは自分のターミナル出力の末尾にローカル TXT を 1 行追加するだけで、ローカルテストを便利にする。 DNS は変更せず、zone file（ゾーンファイル）も書かず、どのクラウドベンダーにも触れない。 動作 あるドメインに TXT を 1 件固定し、以降のクエリで毎回返す dig +txt= TXT dig +txt= +ttl=600 TXT name：ドメイン名。例：app.local value：この TXT の内容。+txt=...

czds

CZDS CZDSとは？ 各トップレベルドメイン TLD はレジストリ運営者によって管理されており、その運営者はセカンドレベルドメイン SLD の公開リストと、それらのドメイン名をインターネットプロトコル IP アドレスに解決するために必要な詳細も管理しています。 レジストリ運営者のゾーンデータには、ドメイン名、関連するネームサーバー名、およびそれらのネームサーバーの IP アドレスのマッピングが含まれています。これらの詳細は、情報が変更されたり、ドメイン名が追加または削除されたりするたびに、レジストリ運営者によってそれぞれの TLD に対して更新されます。...

netscout

NetScout NetScout は、指定されたシード URL に対してドメイン、サブドメイン、ディレクトリ、エンドポイント、ファイルを発見する OSINT ツールです。 以下のコンポーネントで構成されています: BinaryEdge クライアント: サブドメインを取得します DNS: DNS ゾーントランスファーを実行してサブドメインを抽出します クローラー: シード URL から URL とディレクトリを取得します SERP クライアント: ファイルへのリンクを取得します。クローラーが見つけたファイル拡張子に基づいて、特定のファイルタイプを検索するために Google dorkin...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – DNS ゾーン転送 AXFR 情報漏えい プログラムコード Python DNS サーバー + 攻撃 dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class DNSHandlersocketserver.BaseRequestHandler: def handleself: data, sock = self.request request =...

NSEC3-X

면책 조항: 이 프로젝트는 인공지능AI에 의해 생성되었으나 엄격한 "휴먼 인 더 루프"HITL 프로세스를 거쳤습니다. 즉, 코드는 인간 소프트웨어 엔지니어가 검토 및 리팩토링했고, 아키텍처 설계는 인간이 지시했으며, 기능을 검증하고 일반적인 AI 환각 현상을 배제하기 위한 기본 보안 감사가 수행되었습니다. 이 프로세스는 순수 AI 생성으로는 보장할 수 없는 수준의 품질과 신뢰성을 제공합니다. NSEC3-X NSEC3-X는 DNSSEC NSEC3 구성을 감사하기 위해 설계된 특수 포렌식 및 침투 테스트 도구입니다...

AlmaLinux 9.2 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1790962865)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790962865 advisory. - In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are...

CVE-2025-59342

CVE-2025-59342 - 경로 탐색 esm-dev 작성자: Byte Reaper 설명 CVE-2025-59342는 esm.sh의 경로 탐색 취약점입니다. esm.sh는 최신 웹 개발을 위한 nobuild 콘텐츠 전송 네트워크CDN로, 버전 136 및 이전 버전에서 영향을 받습니다. 이 문제는 X-Zone-Id HTTP 헤더를 처리하는 방식에 존재하며, 이 헤더는 파일 시스템 경로를 구성하는 데 사용됩니다. 헤더 값이 적절하게 정규화되거나 애플리케이션의 스토리지 기본 디렉터리로 제한되지 않습니다. 결과적으로 X-Zone-I...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 익스플로잇 제목 : OpenNebula 6.10.0.1 - 저장형 XSS 크로스사이트 스크립팅 in zone attribute 익스플로잇 작성자 : Mark Artamonov 벤더 홈페이지 : https://opennebula.io/ 테스트 버전 : OpenNebula 6.10.0.1 영향받는 버전 : OpenNebula 개념 증명 : 수정 : OpenNebula =7.0으로 업그레이드하세요...

hostresolver

HostResolver 現在のバージョン: 1.0.0 コメントやバグの報告はこちらまで: [email protected] ==================================================================================== 目次: 1. 概要 2. HostResolverの使い方 入力ファイル オプションと設定 スキャン 出力 ==================================================================================== 概要...

CLEANSTART-2026-KC86970 Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component

Security vulnerability affects the cri-tools package. Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component...

CLEANSTART-2026-MQ17226 certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain

Security vulnerability affects the cri-tools package. A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain...

CLEANSTART-2024-OD86351 When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by ...

Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IX...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8352)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268352 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8075)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268075 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc (crlsa-2026_7915)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20267915 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 10.1 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8312)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268312 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the...

Rocky Linux 8 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc (crlsa-2026_8155)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268155 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.2:CLSA-2025:1741126041)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741126041 advisory. - It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional...

CentOS Linux 6 [TuxCare] Security Update: ansible / ansible-doc (CENTOS6:CLSA-2026:1777489309)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777489309 advisory. - A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc (ALMALINUX9.2:CLSA-2024:1726683307)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1726683307 advisory. - Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from...