Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

DNSWatch - DNS Traffic Sniffer and Analyzer

Tools, libraries and applications to analyze network measurements and detect interference.

A simple, fast tool to peek under the hood of any website. See servers, security, colors, and files in one clean dashboard.

Some tutorials for Raspberry PI

Protective DNS resolver based on Cloudflare Workers & D1 | 基于 Cloudflare Workers & D1 的 Protective DNS 解析服务

The Network Traffic Analyzer is a Python script designed for capturing and analyzing network traffic, focusing primarily on DNS traffic. This tool provides users with the capability to monitor network activity in real-time and extract relevant information from captured packets.

This Python script extracts TCP streams from a Packet Capture (PCAP) file by filtering DNS queries for a specified "bad" domain.

🌐 Network Information Toolkit: Your all-in-one Python solution for network analysis. Explore IP addresses, DNS records, SSL certificates, and BGP data with ease. Stay efficient and secure with features like port scanning, whois lookup, and web crawling. Uncover valuable insights effortlessly. 🛠️🔍

kdns is a local DNS server and traffic inspection tool designed to help you monitor and analyze DNS traffic on your localhost. This tool provides a REST API for querying and modifying DNS configuration information and a real-time web interface for visualizing DNS logs.

Welcome to Hunter Phishing Domain! This repository curates a collection of useful tools for identifying lookalike and squatted domains often used in phishing attacks. These tools leverage techniques such as LookAlike and Domain Squatting to detect domains that mimic legitimate ones.

A tool that captures and analyzes DNS traffic to identify suspicious domain lookups, potential DNS tunneling, or communication with malicious domains.

LunarisEye — Smart Network & Web Scanner Explore networks and web targets with precision. Powered by lunaris_engine, LunarisEye offers adaptive port scanning, HTTP/TLS inspection, DNS checks, traceroute, and GeoIP lookups — all in a fast, intelligent CLI. Use responsibly and with authorization only.

An advanced, security-focused network traffic analysis tool designed for system administrators, cybersecurity professionals, and network engineers. The xsukax PCAP Analyzer provides comprehensive insights into network behavior while maintaining strong privacy protections and offering advanced threat detection capabilities.

SubGhost is a powerful subdomain discovery tool. It helps you discover hidden or less visible subdomains for a given domain using public API services. The tool is designed to be simple to use while offering great flexibility, such as the ability to choose the output format for results.

DRAKORYX is an advanced cybernetic CDN detection tool that reveals hidden infrastructure behind websites. It identifies Cloudflare, CloudFront, Fastly, and Akamai protection, discovers origin IPs, and provides comprehensive network analysis for security professionals and penetration testers.

ReconX is a Linux-based, terminal-driven reconnaissance and vulnerability assessment framework for penetration testing and bug bounty hunting. It automates the full reconnaissance lifecycle.

DNS traffic analyzer written in Python for capturing, parsing, and inspecting DNS packets and queries in real time.

TryHackMe write-up focused on IP/domain threat intelligence, DNS records, ASN lookups, geolocation, exposed services, and passive DNS analysis.