CVE-2016-2776 PoC — ISC BIND 安全漏洞

Source

https://github.com/infobyte/CVE-2016-2776

Associated Vulnerability

Title: ISC BIND 安全漏洞 (CVE-2016-2776)
Description:buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

Description

CVE-2016-2776

Readme

# CVE-2016-2776
A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776.

http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html

In this repository you will find:

* Proof-of-Concept (namedown.py)
* Metasploit Auxiliary Module (namedown.rb)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →