fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

dns-zone-audit

DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8075)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268075 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 10.1 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc (crlsa-2026_8312)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20268312 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from the...

limeyard

limeyard Un laboratorio de pruebas de seguridad. Una flota de objetivos deliberadamente vulnerables, un entorno de red enrutable con DNS autoritativo para el descubrimiento de activos que enumerar, una clave de respuestas legible por máquina por objetivo y un panel de control para gestionarlo tod...

CVE-2021-40906

CVE-2021-40906 - XSS Reflejado en una zona no autenticada Aplicación: Consola de Administración Web de CheckMK Revisión de Software: De 1.5.0 a 1.5.0p25 Autor: Edgar Augusto Loyola Torres. Tipo de ataque: XSS Reflejado Solución: Actualizar a la Revisión de Software 1.6.0p26 o posterior Resumen: E...

Important: bind

Issue Overview: For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized...

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Reproduciendo CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Salida: Ataque curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Salida: Registros: Referencia: https://vulners.com/cve/CVE-2021-45105...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Omisión de Autenticación en Progress ShareFile Herramienta Generadora de Artefactos de Detección para la Omisión de Autenticación en Progress ShareFile Descripción Este generador de artefactos de detección verifica si la instancia de Progress ShareFile es vulnerable a la omisión de...

CVE-2025-22870

PoC – CVE-2025-22870 – HTTP Proxy Bypass via IPv6 Zone ID in Go Summary This Proof of Concept demonstrates the exploitation of CVE-2025-22870, a vulnerability in the golang.org/x/net/http/httpproxy package prior to v0.36.0, which can be used to bypass HTTP proxy restrictions by abusing the way IP...

dnspython

dnspython INTRODUCCIÓN dnspython es un conjunto de herramientas DNS para Python. Admite casi todos los tipos de registros. Se puede utilizar para consultas, transferencias de zona y actualizaciones dinámicas. Admite mensajes autenticados con TSIG y EDNS0. dnspython proporciona acceso tanto de alt...

dns-zone-transfer-test

DNS Zone Transfer Test Automates Domain Name System DNS zone transfer testing. Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output. Usage dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1...

Security_incident_report

01. Configuración de la infraestructura La infraestructura de este proyecto no se gestiona mediante código IaC Terraform, etc., sino que se configuró instalando pfSense·Wazuh y luego modificando la configuración directamente desde la interfaz de administración GUI. Por eso, aquí no se documenta e...

dig

dig Envoltorio local de dig en macOS. Quien realmente envía la consulta sigue siendo el /usr/bin/dig del sistema. Este proyecto solo añade un TXT local al final de la salida de tu propia terminal, para facilitar las pruebas locales. No modifica DNS, no escribe zone file archivos de zona, ni toca...

czds

CZDS ¿Qué es CZDS? Cada dominio de nivel superior TLD es mantenido por un operador de registro, quien también gestiona una lista disponible públicamente de dominios de segundo nivel SLD y los detalles necesarios para resolver esos nombres de dominio a direcciones de Protocolo de Internet IP. Los...

netscout

NetScout NetScout es una herramienta OSINT que encuentra dominios, subdominios, directorios, endpoints y archivos para una URL semilla determinada. Consta de los siguientes componentes: Cliente de BinaryEdge: Obtiene subdominios DNS: Intenta realizar una transferencia de zona DNS para extraer...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – Divulgación de información de transferencia de zona DNS AXFR Código del programa servidor DNS en Python + ataque dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class...

Linux Distros Unpatched Vulnerability : CVE-2026-93230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Gigantic bootmem HugeTLB pages are currently initialized from hugetlbinit, but...

SUSE CVE-2026-93230

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Gigantic bootmem HugeTLB pages are currently initialized from hugetlbinit, but pageallocinitlate runs earlier and walks pageblocks to determine zone contiguity...

DEBIAN-CVE-2026-93230

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Gigantic bootmem HugeTLB pages are currently initialized from hugetlbinit, but pageallocinitlate runs earlier and walks pageblocks to determine zone contiguity...