#dns

Chaos
sponsor
Chaos

Collect and maintain internet-wide assets data for public Bug Bounty programs.

dnsX
sponsor
dnsX

Fast and multi-purpose DNS toolkit designed for running DNS queries.

tlsx
sponsor
tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

ASNmap
sponsor
ASNmap

Quickly maps organization network ranges using ASN information.

DNSProbe
sponsor
DNSProbe

Allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

shuffleDNS
sponsor
shuffleDNS

Enumerate valid subdomains using active bruteforce and DNS resolution.

Powermad
Powermad

PowerShell MachineAccountQuota and DNS exploit tools.

Gsec
Gsec

Web security scanner.

FinalRecon
FinalRecon

All In One Web Recon.

whonow
whonow

A malicious DNS server for executing DNS Rebinding attacks on the fly.

zdns
zdns

Fast CLI DNS lookup tool.

dnswalk
dnswalk

A DNS database debugger.

DNSWatch
DNSWatch

DNS traffic sniffer and analyzer.

brute ratel
brute ratel

A customized command and control center for red team and adversary simulation.

WhoisXMLAPI
WhoisXMLAPI

Domain & IP data intelligence for greater enterprise security.

resolvers
resolvers

The most exhaustive list of reliable DNS resolvers.

bbot
bbot

OSINT automation for hackers.

Rapidscan
Rapidscan

The multi tool web vulnerability scanner.

passiveDNS
passiveDNS

A network sniffer that logs all DNS server replies for use in a passive DNS setup.

DNSExfiltrator
DNSExfiltrator

Data exfiltration over DNS request covert channel.

Fresh Resolvers
Fresh Resolvers

List of fresh DNS resolvers updated every 12h.

Ghostbuster
Ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

DNSCewl
DNSCewl

A DNS bruteforcing wordlist generator.

fastsub
fastsub

A DNS bruteforcer with multi-threading, and handling of bad resolvers.

dnstwist
dnstwist

Domain name permutation engine for detecting several types of attacks.

DNSMORPH
DNSMORPH

Domain name permutation engine written in Go.

dnscat2
dnscat2

Create an encrypted command-and-control (C&C) channel over the DNS protocol.

PyExfil
PyExfil

Set as many exfiltration, techniques that CAN be used to bypass various.

DNSTracer
DNSTracer

Trace the path of a DNS query.

hunter.how
hunter.how

Internet search engines for security researchers.

Responder
Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner.

RED HAWK
RED HAWK

All in one tool for information gathering, vulnerability scanning and crawling.

Skanuvaty
Skanuvaty

Dangerously fast DNS/network/port scanner.

Shodan
Shodan

Search engine for Internet-connected devices.

Netlas.io
Netlas.io

Netlas.io is the network atlas of Internet. IP, DNS, Web, IoT devices, and etc.

AORT
AORT

All in one recon tool for bug bounty.

Ronin
Ronin

A free and open source Ruby toolkit for security research and development.

dnstwist_
dnstwist_

A tool to monitor for potential spear phishing domains and send to Slack.

CloudJack
CloudJack

Route53/CloudFront Vulnerability assessment utility.

Can I Take Over DNS?
Can I Take Over DNS?

A list of DNS providers and how to claim (sub)domains via missing hosted zones.

LiveTargetsFinder
LiveTargetsFinder

Generates lists of live hosts and URLs.

Async DNS Brute
Async DNS Brute

DNS asynchronous brute force utility.

SonarSearch
SonarSearch

A rapid API for the project Sonar dataset.

NSDetect
NSDetect

Utility to detect AWS NS Takeover.

Yet Another Sniffer
Yet Another Sniffer

A network analyzer that make easy to extract informations about network traffic.

SecurityTrails
SecurityTrails

Data for Security companies, researchers and teams.

GSAN
GSAN

Extract subdomains from SSL certificates in HTTPS sites.

Raccoon
Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning.

ScreenShooter
ScreenShooter

Convert your masscan/subdomain-scan results into screenshots for better analysis.

Domain Analyzer
Domain Analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

espionage
espionage

Collects informations related to domains whois, history, dns records and more.

findsecuritycontacts.com
findsecuritycontacts.com

Scans the top 500 sites daily for their security.txt file or DNS records.

SqlmapDnsCollaborator
SqlmapDnsCollaborator

Lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap.

tko-subs
tko-subs

A tool that can help detect and takeover subdomains with dead DNS records.

cnames
cnames

Take a list of resolved subdomains and output any corresponding CNAMES en masse.

autoSubTakeover
autoSubTakeover

A tool used to check if a CNAME resolves to the scope address.

MSDNSScan
MSDNSScan

Identify DNS records, check for zone transfers and conduct subdomain enumeration.

See-SURF
See-SURF

Detect Vulnerable SSRF parameters.

Sub3 Suite
Sub3 Suite

A free, open source, cross platform Intelligence gathering tool.

Scilla
Scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration.

DNSRecon
DNSRecon

DNS Enumeration Script.

dnsenum
dnsenum

Enumerates DNS information of a domain and to discover non-contiguous ip blocks.

Fierce
Fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

dnsReaper
dnsReaper

Subdomain takeover tool for attackers, bug bounty hunters and the blue team!

DNSTake
DNSTake

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.

puredns
puredns

Puredns is a fast domain resolver & subdomain bruteforcing tool.

Masscan
Masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

hakrevdns
hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

SubBrute
SubBrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

MassDNS
MassDNS

A high-performance DNS stub resolver for bulk lookups and reconnaissance.