Development on DUALUSE

CURRYFINGER - SNI & Host header spoofing utility

Tue, 10 Sep 2019 00:00:00 +0000

CURRYFINGER measures a vanilla request for a particular URL against requests directed to specific IP addresses with forced TLS SNI and HTTP Host headers. The tool takes a string edit distance, and emits matches according to a rough similarity metric threshold.

ALEXATOP - Finding domains in CIDRs

Mon, 09 Sep 2019 00:00:00 +0000

I put this tool together over a weekend in order to produce a dataset for other tools I’m writing. We PoC this against the Alexa top 1m, but you might enjoy using it to find domains that land in other ranges of interest.

DNSPUMP - File delivery over DNS

Fri, 21 Jun 2019 00:00:00 +0000

This tool helps you deliver files to machines entirely over DNS using TXT records. Point ns records at a box, host DNSPUMP and you’re ready to roll.

DNSPUMP was hastily hacked together over the course of two days and relies entirely on the excellence of Miek Gieben’s Go DNS package miekg/dns ¹.