
Hundred OSINT
Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…

Local-first, keyboard-driven OSINT workbench for the terminal with 28 modules covering username, domain, IP, email, breach, and geolocation lookups…
Proof-of-concept demonstrating DNS cache poisoning via additional record injection in BIND 9, with tools to validate and exploit CVE-2025-40778 for…

Proof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…

DNS vulnerability exploit for CVE-2023-50387 with automated RRSIG key generation and Docker-based attack simulation against vulnerable and patched…

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…

A LSTM based framework for handling multiclass imbalance in DGA botnet detection

ZynOS tool for automated attack on a range of IPs, find more informations at :


Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping,…

In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS…

Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385,…

Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)

A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…

Proof-of-concept exploit for CVE-2018-5740, a denial-of-service vulnerability in BIND DNS server triggered by a crafted DNAME query, with…

PowerDNS CVE-2017-15120 / DO NOT ABUSE

A front-end JavaScript toolkit for creating DNS rebinding attacks.

ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library

Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records.