dns-pentesting

Warn

Audited by Socket on Oct 16, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

这是一个面向 AI 代理的攻击型 DNS 渗透测试 skill,能力范围包含主动扫描、漏洞利用、隐蔽隧道和潜在数据渗出。虽无明显恶意安装器或隐蔽代码,但其实际用途是赋予代理 offensive security 与外传能力,整体应判为高风险而非 benign。

Confidence: 94%Severity: 91%
SecurityMEDIUM
references/dns-techniques.md

The provided content is an offensive DNS attack/recon playbook (DNS tunneling via iodine/dnscat2/dns2tcp, potential DNS amplification scanning, and guidance for extracting risky BIND configuration/TSIG secrets). It is strongly aligned with malicious or intrusion-enabling behavior rather than defensive library functionality. No legitimate software-supply-chain library code is present in the snippet.

Confidence: 85%Severity: 90%
Audit Metadata
Analyzed At
Oct 16, 2026, 05:16 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fdns-pentesting%2F@2e613893a70d488f5ab7f9de283a085d144b724a3098d4c56f942095db7f66bd