Awesome-DNS-Security - Awesome DNS Security is a curated list of tools, b

项目说明

Awesome DNS Security

> A curated list of awesome DNS security tools, techniques, and educational resources for de, security professionals, and enthusiasts.

Table of Contents

O

Introduction to DNS

DNS Security Standards

DNS Tools

DNS Monitoring and Analysis

DNS Firewalls and Filtering

DNS Tunneling Detection and Pre

DNSSEC (DNS Security Extensions)

DNS Amplification Attack Mitigation

Educational Resources

Articles & Papers

Threat Intelligence

Additional Tools

---

O

The Domain Name System (DNS) is the cornerstone of the internet’s address system. Still, its open nature makes it a frequent target for attacks such as DNS spoofing, DNS cache poisoning, amplification DDoS, and DNS tunneling. This list provides resources and tools to enhance DNS security, monitor DNS traffic, detect malicious usage, and deploy proper defenses.

---

Introduction to DNS

DNS is a core internet protocol that translates human-readable domain names into IP addresses. To start with the basics, here are some great introductory resources:

howdns.works - and fun explanation of DNS concepts.

A warm welcome to DNS - Beginner-friendly introduction to DNS by PowerDNS.

35C3 - Domain Name System - A detailed video lecture on DNS.

Let's hand write DNS messages - Learn how DNS messages are structured at a low level.

DNS for Rocket Scientists - A comprehensi to mastering DNS.

Introduction to DNS - An introduction to DNS by Da.

E about DNS - Explanation on how DNS works by ByteByteGo.

---

DNS Security Standards

RFC 4033-4035: DNSSEC - Defines DNS Security Extensions (DNSSEC) for authenticating DNS data.

RFC 8484: DNS o (DoH) - Encrypt DNS requests o to avoid ea and tampering.

RFC 8310: DNS over TLS (DoT) - DNS over TLS, another method to encrypt DNS traffic.

RFC 7871: EDNS0 Client Subnet - Preserves user privacy while using the EDNS0 client subnet option.

---

DNS Tools

dnstwist - Identify phishing domains and potential typo-squatting domains by generating of a domain name.

dnsdiag - Perform DNS diagnostics and health checks.

DNS Reaper - An ad DNS misconfiguration scanner designed for De, with support for cloud infrastructure.

DNSx - Powerful DNS toolkit for resolving, brute-forcing, and DNS recon.

Fierce - DNS reconnaissance tool to find hidden servers.

DSAT - Security analysis of DNS configurations for multiple domains.

Internet.nl - Check whether a domain/website uses modern Internet Standards.

DNS Inspect - A free web tool that checks your domain's servers for common DNS and mail errors and generates a report explaining how to fix them.

dnssec - Performs DNS security audits and takes a DNS IP as user input, which could act as a DNS security scanner.

EDUdig - Web based DNS troubleshooting tool

---

DNS Monitoring and Analysis

dnstop - Monitor DNS traffic for analysis and statistics.

Zeek (formerly Bro) - Network analysis framework with a DNS analyzer for security monitoring.

Case study on DNS anomaly with Zeek - Using Zeek to find persistent threats by monitoring DNS anomalies.

Suricata - Open-source IDS/IPS with built-in DNS logging and analysis capabilities.

Passive DNS - Query historical DNS records to understand domain resolution patterns.

Grafana Teamplate on DNS - DNS analysis template of Grafana uses the prometheus data source.

ELK DNS tunneling

Microsoft DNS analytics with ELK

DNS analysis with Graylog

---

Conference Talk

DNS queries - Walk Softly and Carry 26 Trillion Sticks - DFIR Summit 2015 - OpenDNS case study on 71 Billion DNS queries per day

DEF CON 29 -Justin Perdok - Hi Im DOMAIN Ste Let Me Access VLAN2

DEF CON 29 - Tianze Ding - Exchange: One Domain Account For More Than Exchange Server

Threatpost @ Black Hat USA 2021: A New Class of DNS

How Great is the Great Firewall? Measuring China's DNS Censorship

Injection Attacks Reloaded: Tunnelling Malicious Payloads over DNS

code.talks 2018 E about DNS you ne to ask!

RSA Conference - Power of DNS as an Added Defense Against Modern Attacks

mWISE Conference (from Mandiant) - Taking O - Dangling DNS

All about DNS from DNS OARC

---

DNS Firewalls and Filtering

Pi-hole - A DNS-based filtering tool that blocks ads and malicious domains.

Quad9 - Free public DNS resolver with threat filtering.

Cisco Umbrella - DNS-layer security service with filtering for malware and phishing domains.

---

DNS Tunneling Detection and Pre

Iodine - A DNS tunneling tool for testing the security of DNS tunnels.

dnscat2 - A tool for establishing tunnels via DNS, often used for exfiltration and backdoor communication.

DNSCrypt - Authenticate DNS traffic to prevent man-in-the-middle attacks.

---

DNSSEC (DNS Security Extensions)

DNSViz - A graphical tool for DNSSEC configurations and issues.

OpenDNSSEC - A DNSSEC key and zone management tool.

PowerDNS DNSSEC - PowerDNS setup guide for enabling DNSSEC.

---

DNS Amplification Attack Mitigation

dnsmasq - A caching DNS forwarder that limits the size of responses, pre DNS amplification attacks.

Anycast DNS - Mitigate DNS DDoS using Anycast technology.

Rate-Limiting DNS Resolvers - Implement rate-limiting to prevent DNS amplification attacks.

---

Educational Resources

DNS Security Fundamentals - Comprehensi to DNS security challenges and solutions.

DNS-OARC Workshops - Hands-on workshops focused on operational DNS security topics.

ICANN DNS Security Training - Free training on DNS operations, threats, and protocol issues.

---

Articles & Papers

The State of DNS Security Report - Insights into the latest DNS threats and defenses.

DNS Cache Poisoning Resurgence - An analysis of modern DNS cache poisoning attacks.

Detecting DNS Tunneling - Academic paper on techniques for DNS tunneling detection.

Sub-domain Take over - A Guide To Subdomain Takeovers.

DNS E - History of DNS by Geoff Huston.

DNS infrastructure resilience - A case study of 12 years of DNS infrastructure reformation.

---

Threat Intelligence

SecurityTrails - Comprehensi intelligence platform with DNS and IP intelligence.

DNSDB - Passive DNS threat intelligence platform by Farsight Security.

---

Additional Tools

massdns - High-performance DNS resolver for massi.

dnsrecon - DNS enumeration tool.

dnschef - Highly configurable DNS proxy for testing and research.

---

Contributing

Contributions are welcome! Please open a pull request to add any new tools, articles, or educational resources.

---

License

MIT

项目信息

开发语言：未知

Star 数：22

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Awesome DNS Security is a curated list of tools, best practices, and resources focused on securing DNS infrastructure.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。