{"id":21204383,"url":"https://github.com/acidvegas/nsecx","last_synced_at":"2025-04-13T20:46:58.196Z","repository":{"id":205547715,"uuid":"714497248","full_name":"acidvegas/nsecx","owner":"acidvegas","description":"NSEC[3] Walking for DNSSEC","archived":false,"fork":false,"pushed_at":"2025-03-07T22:24:12.000Z","size":1687,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-13T20:46:50.590Z","etag":null,"topics":["dnssec","nsec","nsec-data","nsec-walking","nsec3","nsec3-enumeration","nsec3-mapping","nsec3-walking","subdomain-enumeration"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/acidvegas.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-11-05T02:44:53.000Z","updated_at":"2025-03-07T22:24:15.000Z","dependencies_parsed_at":null,"dependency_job_id":"5a0cba31-df4f-4cfb-bed9-9583f71539f9","html_url":"https://github.com/acidvegas/nsecx","commit_stats":null,"previous_names":["acidvegas/nsecx"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/acidvegas%2Fnsecx","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/acidvegas%2Fnsecx/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/acidvegas%2Fnsecx/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/acidvegas%2Fnsecx/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/acidvegas","download_url":"https://codeload.github.com/acidvegas/nsecx/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248782279,"owners_count":21160716,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dnssec","nsec","nsec-data","nsec-walking","nsec3","nsec3-enumeration","nsec3-mapping","nsec3-walking","subdomain-enumeration"],"created_at":"2024-11-20T20:32:10.805Z","updated_at":"2025-04-13T20:46:58.175Z","avatar_url":"https://github.com/acidvegas.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# NSECX\n\u003e Research project on NSEC[3] walking for DNSSEC enabled Zones\n\n![](./.screens/preview.gif)\n\n## [Work in Progress]\n\nThe repository contains utilities for DNSSEC zone enumeration and subdomain discovery via NSEC/NSEC3 walking. It focuses on extracting and analyzing DNSSEC records for TLDs and specific target domains. Meant for educational purposes, security research, and sanctioned penetration testing, these tools aid in uncovering the underlying mechanisms of DNS security.\n\n## DNSSEC Statistics\n| Status                                   | Percentage | TLDs  |\n| ---------------------------------------- | ---------- | ----- |\n| [NSEC3](./dnssec_stats/nsec3.txt)        | 90%        | 1313 |\n| [NSEC](./dnssec_stats/nsec.txt)          | 3%         | 51    |\n| [NO DNSSEC](./dnssec_stats/nodnssec.txt) | 7%         | 98    |\n\n###### These statistics are updated daily at midnight UTC via Github Actions.\n\n## NSEC Pitfalls\n- Results inconsistent, must hop dns servers on ALL issues to continue the crawl.\n- Running into \\000 *(null)* characters in sub-domains *(strange bind version [issue](https://gitlab.isc.org/isc-projects/bind9/-/issues/2779) missing \"w\" character in the charmap)*\n\n- Running into *.domain.tld issues creates a crawling loop :\n```\nNext domain: myfreedom.auto.\nNext domain: ne.auto.\nNext domain: neom.auto.\nNext domain: netdirector.auto.\nNext domain: netprophet.auto.\nNext domain: netto.auto.\nNext domain: newjersey.auto.\nNext domain: nexteer.auto.\nNext domain: nextev.auto.\nNext domain: nh.auto.\nNext domain: nic.auto.\nNext domain: *.nic.auto.\nNext domain: _c311ff38bcd400b0adf7fa2b71732858.nic.auto.\nNext domain: a.nic.auto.\nNext domain: b.nic.auto.\nNext domain: c.nic.auto.\nNext domain: d.nic.auto.\nNext domain: web1.nic.auto.\nNext domain: web2.nic.auto.\nNext domain: whois.nic.auto.\nNext domain: _aa5536969dd3a62238209b6b2b750c1c.whois.nic.auto.\nNext domain: www.nic.auto.\nNext domain: _b529263a31adafb2e3be5d632e66c16b.www.nic.auto.\nNext domain: nic.auto.\nNext domain: *.nic.auto.\nNext domain: _c311ff38bcd400b0adf7fa2b71732858.nic.auto.\nNext domain: a.nic.auto.\nNext domain: b.nic.auto.\nNext domain: c.nic.auto.\nNext domain: d.nic.auto.\nNext domain: web1.nic.auto.\nNext domain: web2.nic.auto.\nNext domain: whois.nic.auto.\nNext domain: _aa5536969dd3a62238209b6b2b750c1c.whois.nic.auto.\nNext domain: www.nic.auto.\nNext domain: _b529263a31adafb2e3be5d632e66c16b.www.nic.auto.\nNext domain: nic.auto.\nNext domain: *.nic.auto.\nNext domain: _c311ff38bcd400b0adf7fa2b71732858.nic.auto.\n```\n\n## References\n- https://www.rfc-editor.org/rfc/rfc5155.html\n\n___\n\n###### Mirrors for this repository: [acid.vegas](https://git.acid.vegas/nsecx) • [SuperNETs](https://git.supernets.org/acidvegas/nsecx) • [GitHub](https://github.com/acidvegas/nsecx) • [GitLab](https://gitlab.com/acidvegas/nsecx) • [Codeberg](https://codeberg.org/acidvegas/nsecx)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Facidvegas%2Fnsecx","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Facidvegas%2Fnsecx","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Facidvegas%2Fnsecx/lists"}