dns | Penetration Testing Tools

SPARTA

March 28, 2017dookieInformation Gatheringdns, enumeration, gui, http, https, infogathering, mysql, passwords, portscanning, recon, smb, snmp

sparta Package Description SPARTA is a python GUI application that simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase. It allows the tester to save time by having point-and-click access to their toolkit and by displaying all tool output in a convenient way. If less time is spent…

DNSChef

February 18, 2014portsSniffing/Spoofingdns, proxy, sniffing, spoofing

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy (aka “Fake DNS”) is a tool used for application network traffic analysis among other uses.

dnsenum

February 18, 2014portsInformation Gatheringdns, infogathering, recon

Multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks.

dnsmap

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnsmap was originally released back in 2006 and was inspired by the fictional story “The Thief No One Saw” by Paul Craig, which can be found in the book “Stealing the Network – How to 0wn the Box”.

DNSRecon

February 18, 2014portsInformation Gatheringdns, infogathering, recon

A powerful DNS enumeration script

dnstracer

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnstracer determines where a given Domain Name Server (DNS) gets its information from for a given hostname, and follows the chain of DNS servers back to the authoritative answer.

dnswalk

February 18, 2014portsInformation Gatheringdns, infogathering, recon

dnswalk is a DNS debugger. It performs zone transfers of specified domains, and checks the database in numerous ways for internal consistency, as well as accuracy.

Fierce

February 18, 2014portsInformation Gatheringdns, infogathering, portscanning, recon

First what Fierce is not. Fierce is not an IP scanner, it is not a DDoS tool, it is not designed to scan the whole Internet or perform any un-targeted attacks. It is meant specifically to locate likely targets both inside and outside a corporate network.