DNS Security Scanners
Weak DNS configuration enables phishing, email spoofing, and subdomain takeover attacks. DNS security scanners check your zones for missing SPF/DMARC records, misconfigured DNSSEC, open resolvers, and takeover-vulnerable records.
Important DNS Controls Scanners
DNS Zone Transfer Checker
DNS servers share zones using AXFR protocol. If it’s misconfigured, attackers can get all DNS information related to your domain. You can use S4E’s DNS vulnerability scanner to scan your DNS zone transfer.
DNS Rebinding Attack Scanner
This scanner detects the DNS Rebinding. It helps identify vulnerability arising from DNS responses containing private IP addresses and ensures network security.
DNSSEC Detection Scanner
This scanner detects the use of DNSSEC in digital assets. Domain Name System Security Extensions ensure authentic and verified domain responses, maintaining internet security.
DNS DMARC Scanner
This scanner detects the use of DNS DMARC in digital assets.
SPF Record Scanner
This scanner detects the use of SPF Record in digital assets. It helps in identifying whether an SPF TXT record is present, which is valuable for ensuring email security.
DKIM Record - Detection Scanner
This scanner detects the use of DKIM Record - Detection in digital assets.
CAA Record Scanner
This scanner detects the use of CAA Record in digital assets.
ElasticBeanstalk Scanner
This scanner detects the ElasticBeanstalk Subdomain Takeover in digital assets. It helps identify potential security risks associated with subdomain takeover vulnerabilities, ensuring the protection of your online assets.
Predictable-TXID DNS Recursion Vulnerability Scanner
You can scan DNS server to predictable-TXID vulnerability by using this tool.
DNS Server Discovery Scanner
DNS Server Discovery Scanner
Dnsmasq File Disclosure Scanner
This scanner detects the use of Dnsmasq File Disclosure in digital assets.
DNS Nameserver ID (NSID) Scanner
You can scan DNS nameserver by using this tool.
DNS ANY Record Query
An ANY DNS query is used to get all DNS records available for a specific domain name. Let's check what DNS records are answered to ANY DNS query for your domain. Make an ANY DNS request with this tool.
SOA Record Service Scanner
This scanner detects the use of SOA Record Service in digital assets. It helps identify which domain provider a domain is using by analyzing the SOA records.
MX Record Detection Scanner
This scanner detects the use of MX Record in digital assets. It is valuable for identifying the mail exchange server configurations and ensuring proper email routing.
SPF record DNS lookup limit Scanner
This scanner detects the use of SPF record DNS lookup limit in digital assets.
TLSA Record DANE Detection Scanner
This scanner detects the use of TLSA Record - DANE Detection in digital assets.
SRV Record Service Detection Scanner
This scanner detects the use of SRV Record Service in digital assets.
AAAA Record Lookup Tool
AAAA Record Lookup Tool
AAAA Record Detection Scanner
This scanner detects the use of AAAA Record in digital assets. It helps in identifying IPv6 addresses associated with domain names for enhanced security management.
CVE-2007-1748 Scanner
Detects 'Buffer Overflow' vulnerability in RPC interface in the Domain Name System (DNS) Server Service affects v. Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2.
NS Record Detection Scanner
This scanner detects the use of NS Record in digital assets.
Wildcard DNS Configuration Detection Scanner
This scanner detects the use of Wildcard DNS Configuration in digital assets. It helps identify wildcard DNS records that resolve all subdomains to the same IP address, indicating a potential catch-all setup.
AAAA Record - IPv6 Detection Scanner
This scanner detects the use of AAAA Record - IPv6 Detection in digital assets.
DNS TXT Service Scanner
This scanner detects the use of DNS TXT Service in digital assets. It helps identify which services companies are using by analyzing their TXT records for specific service verification entries.
BIMI Record Scanner
This scanner detects the use of BIMI Record in digital assets. It ensures that BIMI records are identified, enhancing brand recognition and email marketing efforts.
Public DNS Resolving to Private IP Addresses Scanner
This scanner detects the use of Public DNS Resolving to Private IP Addresses in digital assets.
FBI Seized Nameserver Scanner
This scanner detects the use of FBI Seized Nameserver in digital assets.
DNS SaaS Service Detection Scanner
This scanner detects the use of DNS SaaS Service in digital assets. It identifies specific DNS CNAME configurations often used across various cloud and service platforms to ensure accurate detection of their implementation.
DNS Servfail Host Finder Scanner
This scanner detects the DNS Servfail in digital assets.
CNAME Detect Dangling Scanner
This scanner detects the use of Dangling CNAME in digital assets. It identifies potential vulnerabilities arising from unremoved records, ensuring proper configuration of DNS records for enhanced security.
DNS A Record Lookup
Any system or anyone who wants to access your domain has to resolve your A records. These records point to IPv4 addresses. You can make an online DNS A record lookup, and check IPv4 address of your domain.
PTR Detected Scanner
This scanner detects the use of DNS PTR records in digital assets. It identifies DNS PTR records that map IP addresses to domain names for reverse DNS lookup. This is valuable for assessing information exposure in network setups.
DNS CNAME Record Lookup
DNS CNAME Record Lookup Tool
DNS TXT Record Lookup
TXT records are used to keep text values related to your domain name. This type of record usually used for, proof for ownership of domain (google, yandex verification), Sender Policy Framework (SPF) records or DKIM. Check your TXT records with TXT record lookup tool.
DNS MX Record Lookup
DNS MX Record Lookup
Detect DNS over HTTPS
Even if you are visiting a site using HTTPS, your DNS query is sent over an unencrypted connection. That means that even if you are browsing https://cloudflare.com, anyone listening to packets on the network knows you are attempting to visit cloudflare.com.
DNS NS Record Lookup
DNS NS Record Lookup Tool
Run all DNS Controls checks at once.
S4E covers 38+ scanners in this category with continuous monitoring and full remediation guidance.
Start Free Scan →