Awesome GitHub RepositoriesDNS Tools

Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using cust

dnscrypt-proxy is an anonymizing DNS proxy and encrypted DNS resolver. It acts as a local DNS forwarder that secures internet lookups by wrapping standard DNS queries in encrypted tunnels using the DNSCrypt and DNS-over-HTTPS protocols to prevent eavesdropping and tampering. The project provides network privacy protection by routing DNS requests through anonymized relays to obfuscate the client's original IP address. It further distinguishes itself through traffic management capabilities, such as mapping specific domains to designated resolvers and distributing queries across multiple servers

bandwhich is a command-line network utility and terminal bandwidth monitor designed for real-time traffic analysis. It functions as a process-based traffic tracker that links network bandwidth usage directly to the system processes and remote hosts responsible for the data transfer. The tool provides a terminal user interface for monitoring active connections and identifying data-consuming applications. It performs background reverse DNS lookups to associate remote IP addresses with human-readable hostnames and tracks cumulative data utilization over the duration of a capture session. Its br

PoisonTap is a hardware attack tool designed for the Raspberry Pi Zero that exploits a USB connection to a locked or password-protected computer, extracting browser cookies and session data from the top million websites without requiring the device to be unlocked. It operates by bypassing the lock screen through USB and network stack exploitation, then siphoning HTTP cookies and intercepting all outbound Internet traffic by overriding network routing through a local device. The tool distinguishes itself through multiple persistence and recovery mechanisms that maintain access even after cooki

dnsmasq-china-list est un générateur de configuration et un ensemble de listes de filtrage et de routage DNS. Il convertit des listes de domaines curatées en fichiers de configuration pour dnsmasq afin d'optimiser la résolution de noms régionale et de diriger des requêtes de domaines spécifiques vers des serveurs régionaux. Le projet se concentre sur la réduction de la latence et l'évitement du détournement DNS pour les utilisateurs en Chine en routant le trafic via des serveurs régionaux et en dirigeant les requêtes vers les nœuds de réseau de diffusion de contenu (CDN) les plus proches. Il fournit également des règles pour bloquer les domaines malveillants et les publicités en renvoyant des réponses d'échec pour empêcher l'injection réseau. Le système gère les configurations DNS en supprimant les entrées de sous-domaines redondantes et en éliminant les hiérarchies de domaines qui se chevauchent pour optimiser l'utilisation de la mémoire. Il prend également en charge la prévention des fuites DNS en restreignant les domaines de fournisseurs non approuvés et en mettant sur liste blanche les serveurs de noms de confiance.

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe