{"id":18716708,"url":"https://github.com/juxhindb/oob-server","last_synced_at":"2025-07-31T08:05:26.524Z","repository":{"id":37809341,"uuid":"154660208","full_name":"JuxhinDB/OOB-Server","owner":"JuxhinDB","description":"A Bind9 server for pentesters to use for Out-of-Band vulnerabilities","archived":false,"fork":false,"pushed_at":"2019-08-25T16:01:07.000Z","size":22,"stargazers_count":191,"open_issues_count":1,"forks_count":75,"subscribers_count":7,"default_branch":"master","last_synced_at":"2025-07-14T05:16:08.266Z","etag":null,"topics":["appsec","infosec"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JuxhinDB.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-10-25T11:33:54.000Z","updated_at":"2025-06-14T11:13:17.000Z","dependencies_parsed_at":"2022-07-14T21:46:57.977Z","dependency_job_id":null,"html_url":"https://github.com/JuxhinDB/OOB-Server","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/JuxhinDB/OOB-Server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JuxhinDB%2FOOB-Server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JuxhinDB%2FOOB-Server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JuxhinDB%2FOOB-Server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JuxhinDB%2FOOB-Server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JuxhinDB","download_url":"https://codeload.github.com/JuxhinDB/OOB-Server/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JuxhinDB%2FOOB-Server/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265703661,"owners_count":23814047,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["appsec","infosec"],"created_at":"2024-11-07T13:13:34.633Z","updated_at":"2025-07-18T05:09:48.306Z","avatar_url":"https://github.com/JuxhinDB.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Out-of-Band DNS Bind Server\r\n\r\nA simple Bind9 server that acts as an open DNS resolver. \r\n\r\n**Note**—for this to work without specifying nameservers \r\n(i.e. `dig A +short foo.bar @ns1.foo.bar`), you would need your domain provider\r\nto have the domain point to your custom domain for example:\r\n\r\n- ns1.foo.bar =\u003e `127.127.127.127`\r\n- ns2.foo.bar =\u003e `127.127.127.127`\r\n\r\n## Usage\r\n\r\n```\r\nUsage: setup DOMAIN_NAME IP\r\n       setup foo.bar 1.1.1.1\r\n       setup -h\r\n       setup --help\r\n\r\nOptions:\r\n  -h, --help        Print this help message\r\n```\r\n\r\nYou can then monitor your Bind9 traffic like so:\r\n\r\n```\r\nfoo@vm13407021391238:~$ sudo tail -f /var/log/named/named.log\r\n25-Oct-2018 13:22:18.015 queries: info: client @0x7f25082bef80 255.255.255.255.16360047 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:20.352 queries: info: client @0x7f25082bef80 255.255.255.255.88#61503 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:20.654 queries: info: client @0x7f25082bef80 255.255.255.255.60#18303 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:20.903 queries: info: client @0x7f25082bef80 255.255.255.255.60#36200 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:21.371 queries: info: client @0x7f25082bef80 255.255.255.255.60#18303 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:21.617 queries: info: client @0x7f25082bef80 255.255.255.255.60#60065 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:22.080 queries: info: client @0x7f25082bef80 255.255.255.255.60#51886 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:22.335 queries: info: client @0x7f25082bef80 255.255.255.255.60#51410 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:22.778 queries: info: client @0x7f25082bef80 255.255.255.255.60#61740 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 13:22:23.030 queries: info: client @0x7f25082bef80 255.255.255.255.60#20153 (foo.bar): query: foo.bar IN A -E(0) (127.127.127.127)\r\n```\r\n\r\nOr for something more specific:\r\n\r\n###### Client\r\n\r\n`dig 12321931-xxe.gbejna.bid`\r\n\r\n###### Server\r\n\r\n```\r\n25-Oct-2018 14:43:28.202 queries: info: client @0x7f24f8001250 195.158.104.28#58760 (12321931-xxe.foo.bar): query: 12321931-xxe.foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 14:43:28.297 queries: info: client @0x7f24f8001250 195.158.104.28#58760 (12321931-xxe.foo.bar): query: 12321931-xxe.foo.bar IN A -E(0) (127.127.127.127)\r\n25-Oct-2018 14:43:28.390 queries: info: client @0x7f24f8001250 195.158.104.28#58760 (12321931-xxe.foo.bar): query: 12321931-xxe.foo.bar IN A -E(0) (127.127.127.127)\r\n```\r\n\r\n## Why\r\n\r\nThis is very useful when wanting to test for some very hairy vulnerabilities\r\nsuch as XXE, SSRF and so on. You can inject payloads with random IDs and \r\nsubdomains like `8273781123-xxe.foo.bar` and `grep` for it in your logs to\r\nsee if the payload ever executed.\r\n\r\nThis is also nice to do with Bind9 because:\r\n\r\n- It's super fast, can handle being an open DNS resolver\r\n- DNS outbound traffic is _rarely_ filtered, even if HTTP is\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjuxhindb%2Foob-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjuxhindb%2Foob-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjuxhindb%2Foob-server/lists"}