Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-50387 — DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched Unbound resolvers. | Kitploit
Tools/GitHubGitHub/pablodiz/cve-2023-50387
Vulnerability AnalysisExploitationNetwork SecurityPenetration TestingLearning & EducationDNS Analysis
GitHubpablodiz/cve-2023-50387

CVE-2023-50387

DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched Unbound resolvers.

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Repository based on https://github.com/knqyf263/CVE-2023-50387 with several modifications:

  • Added resolver-fixed, which has an implementation of Unbound where the vulnerability we discussed is fixed.
  • Created scripts for automating the generation of RRSIG keys.

To auto-generate configuration files:

root@kitploit:~
./generar.sh

Preconditions: the script is written for Linux, requires python3 and the utilities dnssec-keygen and dnssec-signzone (on Debian-based systems, in the bind9-utils package).

To start the dockers:

root@kitploit:~
sudo docker-compose up --build

To trigger the attack:

root@kitploit:~
sudo docker compose exec -it attacker dig @10.10.0.3 www.a.test
Download Tool