dns-security

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR

Command-line tool to detect email spoofing vulnerabilities by analyzing SPF and DMARC DNS records. Supports single and bulk domain checks with multiple output formats.

Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.

104-tool DNS Security Intelligence MCP Server — DNSSEC, hijacking, tunneling, typosquatting, email security, CT monitoring, blocklist, infrastructure audit. 100% local, zero API keys required.

Multi-layer OPSEC failure analysis framework - Research-grade threat modeling and signal correlation

The DNS Poisoning Detector is a Python-based tool designed to monitor DNS traffic, detect potential DNS poisoning attacks, and generate detailed PDF reports of its findings.

Python CLI for authorized security-readiness checks of websites, email domains, and local repositories.

Public DNS blocklists, exact-host security feeds, RPZ policies, and optional hardening outputs for Pi-hole, AdGuard Home, Unbound, and NextDNS

Subdomain takeover & DNS vulnerability scanner — takeover detection, email security (SPF, DMARC, DKIM), stale DNS, CORS misconfig, DNSSEC, sinkhole hijack, WAF bypass, origin IP discovery. Async, high-accuracy, bug bounty ready.

Open-source self-hosted protective DNS for homelabs and smaller organisations, with security-focused defaults, threat intelligence integrations and transparent DNS controls.

Scanner de segurança em Go para investigar possíveis takeovers de subdomínio e configurações incorretas de DNS, correlacionando DNS, HTTP, TLS, provedores e evidências reproduzíveis.

An advanced, security-focused network traffic analysis tool designed for system administrators, cybersecurity professionals, and network engineers. The xsukax PCAP Analyzer provides comprehensive insights into network behavior while maintaining strong privacy protections and offering advanced threat detection capabilities.

EARWIG is an Advanced DNS Exfiltration Research Tool designed for cybersecurity professionals to analyze covert DNS communication channels, study data transfer techniques, and improve network defense strategies. Built for ethical security research, penetration testing labs, and defensive analysis of DNS-based threats in controlled environments.

Domain and security monitoring system

Open-source, offline-first Windows endpoint security and antivirus with malware scanning, ransomware/process/network monitoring, encrypted quarantine, threat intelligence, and optional on-premises HQ fleet management.

⚔️ DNS Fighter – A powerful multi‑threaded Windows tool to prevent DNS poisoning, compare 4 DNS resolvers, test 7 protocols, and auto‑update the hosts file. | ابزاری قدرتمند و چندریسمانی برای ویندوز که از حملات مسمومیت دی‌ان‌اس جلوگیری می‌کند، خروجی چهار سرور دی‌ان‌اس را مقایسه می‌نماید، هفت پروتکل مختلف را آزمایش کرده و فایل «هاست» را بروز میکند

自托管域名监控与运维看板，用于跟踪域名可注册状态、RDAP/WHOIS、到期时间、SSL 证书、DNS 安全发现、通知告警、成本记录和风险处置流程。Self-hosted domain monitoring and ops dashboard for tracking domain availability, RDAP/WHOIS status, expirations, SSL certificates, DNS security findings, alerts, costs, and triage workflows.

Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux.