
Proof-of-concept exploit for CVE-2020-8617 targeting BIND DNS servers via TKEY transaction abuse, with Docker-based lab environment for testing.
PoC for CVE-2020-8617
For educational purposes only

This image runs a standard BIND server, which automatically generates a tkey "local-ddns".
$ docker run --rm --name cve-2020-8617 -it -p 53:53/udp knqyf263/cve-2020-8617
$ pipenv install
$ pipenv run python exploit.py
Teppei Fukuda