#1DNS reconnaissance, monitoring, tunneling detection, and DNS security analysis tools.
Kitploit recommended
punk-security/dnsreaperFast subdomain takeover scanner with 50+ signatures, supporting cloud provider integrations (AWS, Azure, Cloudflare) and CI/CD pipeline mode for…
dirkjanm/mitm6Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…
karol-broda/snitcha prettier way to inspect network connections
cisco/joyA package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
mschwager/fierceA DNS reconnaissance tool for locating non-contiguous IP space.
sensepost/dns-shellDNS-Shell is an interactive Shell over DNS channel
retlehs/quienA better whois and domain intelligence toolkit
hectorm/hblockImprove your security and privacy by blocking ads, tracking and malware domains.
sensepost/det(extensible) Data Exfiltration Toolkit (DET)
projectdiscovery/shufflednsMassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy…
infobyte/evilgradeEvilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
arno0x/dnsexfiltratorData exfiltration over DNS request covert channel
spr-networks/superOne wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access
haxl0p4/l0p4mapProfessional network monitoring & visualization tool. L0P4Map combines high-speed ARP discovery with full nmap integration and a real-time…
cloudprober/cloudproberAn active monitoring software to detect failures before your customers do.
goshs-labs/goshsFeature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP…
mattkeeley/spoofyBulk domain spoofability checker using authoritative SPF and DMARC record analysis with custom, real-world tested spoof logic and optional DKIM…
