#1DNS reconnaissance, monitoring, tunneling detection, and DNS security analysis tools.
Kitploit recommended

Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.
Website for ail-typo-squatting library

A Lightning-Fast DNS Resolver written in Rust 🦀

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

In-depth ldap enumeration utility

Proof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…


PhantomRecon is a CLI-based, modular, agent-driven red team automation tool designed to demonstrate autonomous offensive security workflows powered…

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

A Python script to parse net blocks & domain names from SPF record

A script to extract domain names from Content Security Policy(CSP) headers

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Trade craft scripts to aid with detecting DNS high jacking attempts

A Windows application to help out with external infrastructure scans.

A program to map out SPF and DKIM records for a large number of domains

Web application that lets you test if your domain is vulnerable to email spoofing