full-disclosure - Tool: PorkBind Nameserver Security Scanner

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080730085313.K15650@innu.org>
Date: Wed, 30 Jul 2008 08:54:25 -0400 (EDT)
From: super@...u.org
To: full-disclosure@...ts.grok.org.uk
Subject: Tool: PorkBind Nameserver Security Scanner

In light of the new DNS cache poisoning issue and now that everyone has 
had plenty of time to apply patches, I've decided to release a new version 
of my nameserver security scanner called porkbind. It is a multi-threaded 
nameserver scanner that can recursively query nameservers of subdomains
for version strings. (i.e. sub.host.dom's nameservers then host.dom's 
nameservers) After acquiring the version strings it tests them against 
version numbers from CERT advisories and reports back to the user. Zone 
transfer capability is also tested for. It is available for download at:

http://innu.org/~super/porkbind-1.2.tar.gz

- Derek

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/