dnstake

DNSTake A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain subdomain.example.com or domain has its authoritative nameserver set to a provider e.g. AWS Route 53, Akamai, Microsoft Azure, etc...

pentesting-multitool

Pentesting-Multitool Introduction Pentesting-Multitool project arises from the need to gather some pentesting tools into one tool. It will be developed using Python3 adding some external libraries as DNSPython, pythonwhois or scapy. The main functions of the script is to collect information about...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

TakeOver-v1

TakeOver-v1 What is Subdomain Takeover? Subdomain Takeover is a type of vulnerability that arises when a subdomain points to an external service that has been deleted or is no longer in use. Common examples of these external services include Github, Heroku, Gitlab, and Tumblr. In this scenario, a...

typofinder

Domain typo finder Typofinder for domain typo discovery Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by: Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com Stephen Tomkinson, @neonbunny9 on twitter Matt Summers, matt dot summers at nccgroup dot com...

passivedns

| | @ | \ | \ | || | TM | |.------. .-----. .-----. -. .-.------. | |\ || | || | | | | || --'| --'| |\ Y /| --| | |/ || || | | || || ||||||| / | /|/ | |||| A tool to collect DNS records passively to aid Incident handling, Network Security Monitoring NSM and general digital forensics. PassiveDNS...

tko-subs

tko-subs 이 도구는 다음을 가능하게 합니다: 서브도메인이 다음과 같은 이유로 탈취될 수 있는지 확인: CMS 제공업체Heroku, Github, Shopify, Amazon S3, Amazon CloudFront 등로 연결되는 링 CNAME이 있어 탈취 가능한 경우 존재하지 않는 도메인 이름으로 연결되는 링 CNAME이 있는 경우 공격자가 서브도메인의 DNS 레코드를 제어할 수 있도록 탈취 가능한 네임서버를 가리키는 하나 이상의 잘못되었거나 오타가 있는 NS 레코드가 있는 경우 -takeover 플래그를 제공하여 해당...

web-check

Web-Check あらゆるウェブサイトに対する包括的なオンデマンドOSINT 🌐web-check.xyz ご支援いただいています: Terminal Trove ターミナル関連のすべてを集めた $HOME | Warp 複数のAIエージェントによるコーディング向けに開発 ---|--- 目次 概要 スクリーンショット ライブデモ ミラー 機能 使用方法 デプロイ オプション1: Netlify オプション2: Vercel オプション3: Docker オプション4: ソース 設定オプション 開発者セットアップ コミュニティ コントリビューション バグ サポート ライセンス 概要...

krbrelayx

Krbrelayx - Kerberosリレーと非制約委任の悪用ツールキット Kerberos を悪用するためのツールキットです。 動作には impacket、ldap3、dnspython が必要です。 最新版を利用できるよう、impacket は git から直接インストールすることをお勧めします。 このツールキットの詳細は私のブログ https://dirkjanm.io/krbrelayx-unconstrained-delegation-abuse-toolkit/ を参照してください。Kerberos リレーの情報は続編ブログ...

dnstake

DNSTake 누락된 호스팅 DNS 영역을 확인하여 서브도메인 탈취로 이어질 수 있는 빠른 도구입니다. DNS 탈취란 무엇인가? DNS 탈취 취약점은 서브도메인subdomain.example.com 또는 도메인의 권위 있는 네임서버가 특정 제공업체예: AWS Route 53, Akamai, Microsoft Azure 등로 설정되어 있지만 호스팅 영역이 제거되거나 삭제된 경우 발생합니다. 결과적으로 DNS 레코드 요청 시 서버가 SERVFAIL 오류로 응답합니다. 이로 인해 공격자는 사용 중이던 서비스에 누락된 호스팅 영역을...

EasyScan

EasyScan EasyScan은 주어진 웹사이트의 HTTP 헤더, DNS 레코드 및 기타 구성을 검사하여 보안을 분석하는 Python 스크립트입니다. 이 스크립트는 점수, 등급 및 잠재적인 취약점 해결을 위한 권장 사항이 포함된 보안 보고서를 생성합니다. 기능 및 테스트 케이스 이 스크립트는 다음 테스트 케이스를 다룹니다: 1. SSL/TLS 검증 : 사이트가 HTTPS를 사용하는지 확인하고, 인증서를 검증하며, 만료일을 보고합니다 30일 미만인 경우 경고. 2. Same Site Scripting :...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

ghostbuster

목차 목차 Ghostbuster 문제점 프로젝트 특징 Ghostbuster 설치 Ghostbuster 사용 출력 예시 AWS 계정 설정 Cloudflare 설정 선택 사항 저자 라이선스 Ghostbuster 모든 AWS 계정 내 리소스를 분석하여 유령 탄력적 IPdangling elastic IP를 제거합니다. Ghostbuster는 모든 AWS 계정Route53에 있는 모든 DNS 레코드를 수집하고, 선택적으로 CSV 입력 또는 Cloudflare를 통해 레코드를 받을 수 있습니다. 레코드가 수집된 후, Ghostbuster...

CVE-2026-93657

A flaw was found in hickory-resolver. This vulnerability allows attackers to bypass Domain Name System Security Extensions DNSSEC authentication checks. By controlling the answering zone or being positioned on the network path, an attacker can have forged DNS records accepted as validated, leadin...

assets-from-spf

assets-from-spf SPF（Sender Policy Framework）DNSレコードからネットブロックおよびドメイン名を解析するPythonスクリプト 解析された各アセットについて、スクリプトは自律システム番号（ASN）の詳細も検索して表示します 現時点では、出力はJSON形式のみで表示されます Demo Screenshots サードパーティのパッケージ依存関係 1. ipwhois 2. click セットアップ このリポジトリをクローン root@kitploit: $ git clone...

CVE-2026-93657 hickory-resolver before 0.26.2 DNSSEC Validation Bypass

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...

CVE-2026-93657: Improper Verification of Cryptographic Signature

hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...

CVE-2026-86003

CoreDNS (a DNS server written in Go) prior to 1.14.7 fails to enforce the dns.DefaultMsgAcceptFunc request policy on its DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners. Unlike the UDP, TCP, and DNS-over-TLS paths, these listeners call dns.Msg.Unpack without that polic...