This repository contains all the tools that I'm creating during the Desec Security Professional Pentest Training
-
Updated
Jun 16, 2025 - Python
This repository contains all the tools that I'm creating during the Desec Security Professional Pentest Training
A .NET 10-based DNS master proxy server that serves zone transfers (AXFR/IXFR) to configured slave DNS servers, with IP whitelisting, NOTIFY support, and selective record filtering.
Test whether a domain's nameservers allow DNS zone transfer (AXFR), and show the zone contents when they do.
DISA STIG hardened BIND 9.16 authoritative DNS on Oracle Linux 8 - hidden primary + secondaries, TSIG hmac-sha384 zone transfers, DNSSEC via dnssec-policy. Air-gapped variant included.
To associate your repository with the zone-transfer topic, visit your repo's landing page and select "manage topics."