dns-pentesting
Warn
Audited by Socket on Oct 16, 2026
2 alerts found:
Securityx2SecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
这是一个面向 AI 代理的攻击型 DNS 渗透测试 skill,能力范围包含主动扫描、漏洞利用、隐蔽隧道和潜在数据渗出。虽无明显恶意安装器或隐蔽代码,但其实际用途是赋予代理 offensive security 与外传能力,整体应判为高风险而非 benign。
Confidence: 94%Severity: 91%
Securityreferences/dns-techniques.md
MEDIUMSecurityMEDIUM
references/dns-techniques.md
The provided content is an offensive DNS attack/recon playbook (DNS tunneling via iodine/dnscat2/dns2tcp, potential DNS amplification scanning, and guidance for extracting risky BIND configuration/TSIG secrets). It is strongly aligned with malicious or intrusion-enabling behavior rather than defensive library functionality. No legitimate software-supply-chain library code is present in the snippet.
Confidence: 85%Severity: 90%
Audit Metadata