Broader security topics that touch the network without belonging to a single platform. Threat models, defensive design, and the trade-offs behind each control.
dnstracer follows the DNS delegation chain from the root servers down to the authoritative source instead of just dumping records. You see where a nameserver's answer actually comes from, with real output captured from Kali in the lab.
massdns is a high-performance stub resolver that pushes over 350,000 DNS queries per second by spreading load across public resolvers. See how internet-scale subdomain enumeration works, with real output from Kali in our lab.
When zone transfers are refused, brute force is how you enumerate a domain. dnsmap grinds a wordlist of common hostnames against a target and keeps every name that resolves. Real output captured from Kali against a BIND9 server in the lab.
Point dnsenum at a domain and get nameservers, MX records, zone transfer attempts, subdomain brute forcing, and reverse sweeps in one report. Every capture is real output from a Kali box against a BIND9 server in the lab.
dnsrecon rolls zone transfers, SRV enumeration, subdomain brute forcing, and reverse lookups into one Python tool. Every command here was run from Kali against a real BIND9 server, with XML, CSV, and JSON export covered.