OSINT Swiss Army Knife

A small, lightweight and extensible DynDNS server written with Ruby and Rack.

Central DNS/DHCP database with replication to Amazon Route53, BIND, MikroTik routers and other services.

This repository contains all the tools that I'm creating during the Desec Security Professional Pentest Training

DNSSEC-monitoring tools used many TLDs

AXFR all the things!

The Zonefile Transfer Toolkit

ICANN Centralized Zone Data Service (CZDS) Tool

Abusing Certificate Transparency logs for getting HTTPS websites subdomains. （通过 HTTPS 证书透明日志，以 **非字典爆破** 的方式获取网站子域名。）

Mass DNS AXFR

List of Estonian top-level internet domains

To check the remote DNS server allows zone transfers

A Docker image which gets the subdomains of a domain on HTTPS, using the CTFR project by Sheila A. Berta.

Subdomain takeover & DNS vulnerability scanner — takeover detection, email security (SPF, DMARC, DKIM), stale DNS, CORS misconfig, DNSSEC, sinkhole hijack, WAF bypass, origin IP discovery. Async, high-accuracy, bug bounty ready.

A .NET 10-based DNS master proxy server that serves zone transfers (AXFR/IXFR) to configured slave DNS servers, with IP whitelisting, NOTIFY support, and selective record filtering.

A complete DNS client library for Dart

Rust SDK for programmatic BIND9 DNS server management — rndc wire protocol, RFC 2136 dynamic updates, AXFR/IXFR zone transfers, zone file parsing, and statistics API. Ships as a Rust crate, Node.js native addon (napi-rs), and CLI tool.

Fast DNS zone transfer (AXFR) scanner for recon and security testing. Detects misconfigured name servers and exposed DNS data. Supports concurrency, verbose mode, and full zone dumping for efficient enumeration and vulnerability discovery.

Enabling Privacy-Aware Zone Exchanges among Authoritative and Recursive DNS Servers

Scan DNS zones for AXFR misconfigurations with fast NS discovery, concurrent checks, and full zone dump support for security testing