#1DNS reconnaissance, monitoring, tunneling detection, and DNS security analysis tools.
Kitploit recommended

CVE-2016-2776
Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Recon, Subdomain Bruting, Zone Transfers

This script will try to find a domains subdomains by using google dorking. It will never connect to the site it is researching.

PoC attack server for CVE-2015-7547 buffer overflow vulnerability in glibc DNS stub resolver (public version)

SANS Hunting on the Cheap

A collection of known Domain Generation Algorithms

PoC exploit server for CVE-2015-7547

Proof-of-concept exploit for CVE-2015-7547 glibc DNS resolver vulnerability. Includes Python and PHP scripts to trigger buffer overflow via crafted…

Proof of concept for CVE-2015-7547

A remote access trojan over DNS

Exploit for CVE-2015-6357 Cisco FireSIGHT Management Center Certificate Validation Vulnerability

A python reverse shell that uses DNS as the c2 channel

Tools for the IP over HTTPS (IP-HTTPS) Tunneling Protocol

Proof-of-concept exploit for BIND9 TKEY assertion Denial-of-Service vulnerability (CVE-2015-5477). Sends a single crafted DNS packet to crash the…

Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 software

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability