#1DNS reconnaissance, monitoring, tunneling detection, and DNS security analysis tools.
Kitploit recommended

analyze a web-based network traffic 🕶 to detect central command and control servers
Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.

A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and easy…

A free, open-source, multi-lingual, template-based VDP policy, safe harbor clause, securitytxt, and DNS Security TXT generator.

Proof-of-concept exploit for CVE-2020-8617 targeting BIND DNS servers via TKEY transaction abuse, with Docker-based lab environment for testing.

Modular Windows C2 framework with a Rust teamserver, Zig implant, indirect syscalls, AMSI bypass, reflective/PoolParty injection, in-memory BOF…

Automated man-in-the-middle attack tool.

A tool to generate Snort rules based on public IP reputation data

Formal modeling and analysis framework for hidden communication systems, enabling specification of covert channels, adversary models, and statistical…

SANS Hunting on the Cheap

Advanced Phishing Protection: Suricata rulesets open and free

Microsoft Network Service Fingerprinting Tool

Web application that lets you test if your domain is vulnerable to email spoofing

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

Essential tool for finding blind injection attacks.

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

Graphical DNS enumeration tool for Kali Linux that scans standard records (A, NS, SOA, MX) and visualizes results in mind maps for reconnaissance and…