dns-security

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR

Command-line tool to detect email spoofing vulnerabilities by analyzing SPF and DMARC DNS records. Supports single and bulk domain checks with multiple output formats.

104-tool DNS Security Intelligence MCP Server — DNSSEC, hijacking, tunneling, typosquatting, email security, CT monitoring, blocklist, infrastructure audit. 100% local, zero API keys required.

Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

Multi-layer OPSEC failure analysis framework - Research-grade threat modeling and signal correlation

The DNS Poisoning Detector is a Python-based tool designed to monitor DNS traffic, detect potential DNS poisoning attacks, and generate detailed PDF reports of its findings.

Python CLI for authorized security-readiness checks of websites, email domains, and local repositories.

Public DNS blocklists, exact-host security feeds, RPZ policies, and optional hardening outputs for Pi-hole, AdGuard Home, Unbound, and NextDNS

Open-source, offline-first Windows endpoint security and antivirus with malware scanning, ransomware/process/network monitoring, encrypted quarantine, threat intelligence, and optional on-premises HQ fleet management.

Subdomain takeover & DNS vulnerability scanner — takeover detection, email security (SPF, DMARC, DKIM), stale DNS, CORS misconfig, DNSSEC, sinkhole hijack, WAF bypass, origin IP discovery. Async, high-accuracy, bug bounty ready.

Scanner de segurança em Go para investigar possíveis takeovers de subdomínio e configurações incorretas de DNS, correlacionando DNS, HTTP, TLS, provedores e evidências reproduzíveis.

Open-source self-hosted protective DNS for homelabs and smaller organisations, with security-focused defaults, threat intelligence integrations and transparent DNS controls.

EARWIG is an Advanced DNS Exfiltration Research Tool designed for cybersecurity professionals to analyze covert DNS communication channels, study data transfer techniques, and improve network defense strategies. Built for ethical security research, penetration testing labs, and defensive analysis of DNS-based threats in controlled environments.

An advanced, security-focused network traffic analysis tool designed for system administrators, cybersecurity professionals, and network engineers. The xsukax PCAP Analyzer provides comprehensive insights into network behavior while maintaining strong privacy protections and offering advanced threat detection capabilities.

Domain and security monitoring system

StrataScan is a gray-hat hackers attack-surface reconstruction engine that transforms web history into actionable security intelligence. It combines OSINT, archive forensics, DNS/TLS analysis, subdomain discovery, secret detection, temporal diffing, live verification, evidence correlation, and automated reporting.

⚔️ DNS Fighter – A powerful multi‑threaded Windows tool to prevent DNS poisoning, compare 4 DNS resolvers, test 7 protocols, and auto‑update the hosts file. | ابزاری قدرتمند و چندریسمانی برای ویندوز که از حملات مسمومیت دی‌ان‌اس جلوگیری می‌کند، خروجی چهار سرور دی‌ان‌اس را مقایسه می‌نماید، هفت پروتکل مختلف را آزمایش کرده و فایل «هاست» را بروز میکند

Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux.