Metasploit Framework

Hi,

Please find a DNS and DNSSEC fuzzer in attachment.
It use a generation-based fuzzing method (intelligent brute force) and supports multiple modes of operation.

msf > use auxiliary/fuzzers/dns/dns_fuzzer
msf auxiliary(dns_fuzzer) > info
Name: DNS server fuzzer.
Version: $
License: Metasploit Framework License (BSD)
Rank: Normal

Provided by:
pello

Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
CLASS no Comma separated list of classes to fuzz. Leave empty to fuzz all fields.
CYCLIC true no Use Cyclic pattern instead of A's (fuzzing payload).
DNSSEC false no Add DNSsec to each question (UDP payload size, EDNS0, ...)
DOMAIN no Force DNS zone domain name.
ENDSIZE 500 no Max Fuzzing string size. (L2 Frame size)
ERRORHDR 0 no Introduces byte error in the DNS header.
IMPORTENUM no Import dns_enum database output and automatically use existing RR.
ITERATIONS 5 yes Number of iterations to run by test case
METHOD UDP no Underlayer protocole to use (UDP, TCP or AUTO).
OPCODE no Comma separated list of opcodes to fuzz. Leave empty to fuzz all fields.
RAWPADDING false no Generate totally random data from STARTSIZE to ENDSIZE
RHOSTS yes The target address range or CIDR identifier
RPORT 53 yes The target port
RR no Comma separated list of requests to fuzz. Leave empty to fuzz all fields.
STARTSIZE 0 no Fuzzing string startsize.
STEPSIZE 100 no Increment fuzzing string each attempt.
THREADS 1 yes The number of concurrent threads
TRAILINGNUL true no NUL byte terminate DNS names

Description:
This module perform DNS and DNSSEC server fuzzing.

Note: the importenum feature read a text file using the following syntax:

www,A,IN
www6,AAAA,IN
blog,CNAME,IN
ns0,NS,IN

Cheers,
pello