Mass DNS AXFR (Zone Transfer)

This script will attempt a Zone Transfer on all of the Root Nameservers and Top-level Domains (TLDs).

Expectations & Legalities

Please set realistic expectations when using this tool. In contemporary network configurations, AXFR requests are typically restricted, reflecting best practices in DNS security. While many nameservers now disallow AXFR requests, there may still be occasional instances where configurations permit them. Always exercise due diligence and ensure ethical use.

Requirements

• dnspython (pip install dnspython)

Usage

Argument	Description
-c, --concurrency	Maximum concurrent tasks.
-o, --output	Specify the output directory (default is axfrout).
-t, --timeout	DNS timeout (default: 30)

Information

I only wrote this to shit on this bozo who took a dead project & brought it back to life by making it even worse. Rather than making a pull request to give this bloke more credit in his "tenure" as a developer, I decided to just rewrite it all from scratch so people can fork off of clean code instead.

As a little added bonus, I have began working on a pure POSIX version of this script for protability, which is included in this repository.

Todo

• Add Public Suffix List support
• Loop mode to run 24/7 for monitoring new TLD's
• NSEC3 Walking features

---

Mirrors

acid.vegas • GitHub • GitLab • SuperNETs