Passive DNS Capture and Monitoring Toolkit

C# code for Transferring Backdoor Payloads by DNS Traffic and Bypassing Anti-viruses

With this program you can bind applications to a specific network interface / network adapter. This is very useful if you have multiple (internet) connections and want your program to use a specific one.

Pure Python netflow and DNS correlation, with reusable Frame Streams, DnsTap and Protobuf implementations

Turn your recursive DNS (BIND) server into a network investigation enabler with DnsTap and RPZ. Make PTR recs great again!

Agent pool that rotates keepalive agents for traffic switching via DNS records

This Python script extracts TCP streams from a Packet Capture (PCAP) file by filtering DNS queries for a specified "bad" domain.

Packet filter PSA