Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2015-7547 — Proof-of-concept exploit for CVE-2015-7547 glibc DNS resolver vulnerability. Includes Python and PHP scripts to trigger buffer overflow via crafted DNS responses, with iptables mitigation notes. | Kitploit
Tools/GitHubGitHub/t0r0t0r0/cve-2015-7547
Vulnerability AnalysisExploitationNetwork SecurityPenetration TestingDNS Analysis
GitHubt0r0t0r0/cve-2015-7547

CVE-2015-7547

Proof-of-concept exploit for CVE-2015-7547 glibc DNS resolver vulnerability. Includes Python and PHP scripts to trigger buffer overflow via crafted DNS responses, with iptables mitigation notes.

View Repository
11210 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2015-7547

https://github.com/fjserna/CVE-2015-7547
So
I tried to see if many things crash on CentOS6.


root@kitploit:~
./CVE-2015-7547-poc.py &
vi /etc/resolve.conf
---------------------------------------------------------------
options single-request-reopen
#nameserver 8.8.8.8
nameserver 127.0.0.1
---------------------------------------------------------------

The PHP function is below

root@kitploit:~
./dns-get.php

iptables
I was able to drop by QTYPE-specific length check, but hmm... Since TCP cannot do length checks, it normally crashes. So it's better to drop TCP by sport.

Download Tool