
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
github.com/openrdap/rdap
OpenRDAP is an command line RDAP client implementation in Go.
https://www.openrdap.org - homepage
https://www.openrdap.org/demo - live demo
This program uses Go. The Go compiler is available from https://golang.org/.
To install:
go install github.com/openrdap/rdap/cmd/rdap@master
This will install the "rdap" binary in your $GOPATH/go/bin directory. Try running:
~/go/bin/rdap google.com
Query type | Usage |
---|---|
Domain (.com) | rdap -v example.com |
Network | rdap -v 2001:db8:: |
Autnum | rdap -v AS15169 |
Nameserver | rdap -v -t nameserver -s https://rdap.verisign.com/com/v1 ns1.google.com |
Help | rdap -v -t help -s https://rdap.verisign.com/com/v1 |
Domain Search | rdap -v -t domain-search -s $SERVER_URL example*.gtld |
Domain Search (by NS) | rdap -v -t domain-search-by-nameserver -s $SERVER_URL ns1.example.gtld |
Domain Search (by NS IP) | rdap -v -t domain-search-by-nameserver-ip -s $SERVER_URL 192.0.2.0 |
Nameserver Search | rdap -v -t nameserver-search -s $SERVER_URL ns1.example.gtld |
Nameserver Search (by IP) | rdap -v -t nameserver-search-by-ip -s $SERVER_URL 192.0.2.0 |
Entity Search | rdap -v -t entity-search -s $SERVER_URL ENTITY-TAG |
Entity Search (by handle) | rdap -v -t entity-search-by-handle -s $SERVER_URL ENTITY-TAG |
See https://www.openrdap.org/docs.
Go 1.20+
Wikipedia - Registration Data Access Protocol
https://data.iana.org/rdap/ - Official IANA bootstrap information
https://test.rdap.net/rdap/ - Test alternate bootstrap service with more experimental RDAP servers
RFC 7480 HTTP Usage in the Registration Data Access Protocol (RDAP)
RFC 7481 Security Services for the Registration Data Access Protocol (RDAP)
RFC 7482 Registration Data Access Protocol (RDAP) Query Format
RFC 7483 JSON Responses for the Registration Data Access Protocol (RDAP)
RFC 7484 Finding the Authoritative Registration Data (RDAP) Service
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.