recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Subrake

Subrake 🦅 A DNS automated scanner and tool Zone Transfer, DNS Zone Takeover, Subdomain Takeover. Background 📈 Subrake, initially started as a personal project of mine for subdomain enumeration is a now a detailed DNS scanning tool that can help you identify Zone Transfers , DNS Zone Takeover and...

dnsrecon

DNSRecon DNSRecon es un puerto en Python de un script en Ruby que escribí para aprender el lenguaje y sobre DNS a principios de 2007. Esta vez quería aprender sobre Python y ampliar la funcionalidad de la herramienta original y, en el proceso, reaprender cómo funciona DNS y cómo podría usarse en ...

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

subjack

subjack Escáner de Toma de Control DNS Subjack es un escáner de toma de control DNS escrito en Go, diseñado para escanear una lista de dominios de forma concurrente e identificar aquellos que pueden ser secuestrados. Gracias a la velocidad y eficiencia de Go, esta herramienta destaca especialment...

fierce

Fierce Fierce es una herramienta de reconocimiento de DNS para localizar espacio IP no contiguo. Enlaces útiles: Sistema de Nombres de Dominio DNS Nombres de Dominio - Conceptos y Facilidades Nombres de Dominio - Implementación y Especificación Análisis de Amenazas del Sistema de Nombres de Domin...

adidnsdump

Herramienta de volcado de DNS integrado de Active Directory Por defecto, cualquier usuario en Active Directory puede enumerar todos los registros DNS en las zonas DNS del Dominio o del Bosque, similar a una transferencia de zona. Esta herramienta permite la enumeración y exportación de todos los...

webstor

WebStor Fast Identification of Vulnerable Web Technologies in your Organization WebStor is a tool implemented in Python under the MIT license for quickly enumerating all websites across all of your organization's networks, storing their responses, and querying for known web technologies and...

Bluto

BLUTO DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Enumeration | MetaData Harvesting Author: Darryl Lane | Twitter: @darryllane101 https://github.com/darryllane/Bluto Like Bluto? Give...

Dnsrr

DNSrr DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS records, it uses different techniques like DNS Forward Bruteforce DNS Reverse Bruteforce DNS Cache Snooping DNS Zone Transfer To get you all the information that you can get, from a DNS server. Installation...

dns-zone-transfer-test

DNS Zone Transfer Test Automates Domain Name System DNS zone transfer testing. Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output. Usage dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1...

czds

CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...

netscout

NetScout NetScout is an OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL. It consists of the following components: BinaryEdge client: Gets subdomains DNS: Attempts to perform a DNS zone transfer to extract subdomains Crawler: Gets URLs and directori...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – DNS Zone Transfer AXFR Information Disclosure Program Code Python DNS Server + Attack dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class DNSHandlersocketserver.BaseRequestHandler: def handleself:...

hostresolver

==================================================================================== HostResolver Current version: 1.0.0 Send comments and bug reports to: [email protected] ==================================================================================== Contents: 1. Overview 2. Using...

dns-zone-audit

DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...

Important: bind

Issue Overview: For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized...

SUSE CVE-2026-19033

For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: coredns (UTSA-2026-109796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109796 advisory. CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. F...