hxdns is a security tool designed for authorized testing. If you discover a vulnerability in hxdns itself (not in the target systems you scan with it), please report it responsibly.

hxdns es una herramienta de seguridad diseñada para pruebas autorizadas. Si descubres una vulnerabilidad en el propio hxdns (no en los sistemas escaneados), repórtala de forma responsable.

1. Do NOT open a public GitHub issue for security vulnerabilities. NO abras un issue público de GitHub para vulnerabilidades de seguridad.

2. Send an email to the maintainer with: Envía un correo al mantenedor con:

   • Subject: [HXDNS SECURITY] <brief description>
   • Description of the issue
   • Steps to reproduce
   • Impact assessment
   • Suggested fix (if any)

3. You will receive a response within 72 hours.

The following are considered in-scope: Se considera dentro del alcance:

• Remote code execution in hxdns
• Information disclosure via hxdns output
• DNS protocol parsing vulnerabilities
• Dependency confusion (though we have none)

The following are out-of-scope: Fuera del alcance:

• Misuse of hxdns against third parties
• Social engineering against the maintainer
• Vulnerabilities in Python itself

We will not pursue legal action against researchers who:

• Report vulnerabilities in good faith
• Do not access or modify user data without permission
• Do not exploit vulnerabilities beyond what is necessary to demonstrate them

Thank you for helping keep hxdns secure. / Gracias por ayudar a mantener hxdns seguro.