PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Free DNS Filtering

projectblack.io | research | #malware | #network-security | #cloudflare | #how-to | #dns-filtering
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

DNS-based filtering is a free, low-effort control: using a security resolver like Cloudflare's 1.1.1.3 stops malicious domains resolving. The post covers its limits and how to roll it out via DHCP.
Published
Collected

Related coverage

research · projectblack.io
Importing Pre-made Kali VMware VM into ESXi
Guide to importing Kali's prebuilt VMware Workstation VM into ESXi/vSphere: either use vCenter Converter, or upload the files to a datastore, register and upgrade the VM, then convert the VMDK.
research · projectblack.io
Whitelisting an IP Address for Penetration Testing in Cloudflare
Why to whitelist a penetration tester's IP in Cloudflare's WAF: rate limits slow testing and the WAF can mask code-level flaws. Includes steps for a skip rule, then re-testing with the WAF enabled.
research · portswigger.net
HTTP/1.1 must die: the desync endgame
HTTP/1.1 desync attacks can mass-compromise credentials via flaws in Akamai, Cloudflare and Netlify. A parser-discrepancy toolkit earned $200,000 in two weeks — Kettle argues HTTP/1.1 must die.
research · portswigger.net
When security features collide
James Kettle argues stacked security features can make systems easier to exploit, demonstrating a Cloudflare email obfuscation quirk that bypasses its WAF and all browser XSS filters.
research · portswigger.net
Bypassing Web Cache Poisoning Countermeasures
James Kettle examines and bypasses vendor countermeasures to web cache poisoning from Cloudflare, Akamai and Fastly, flagging pitfalls like cacheable block pages enabling DoS.
research · aikido.dev
Novel supplychain.local Go worm appears
On 23 September 2026, a threat actor published a novel supply chain worm to the following packages:
Back