Farsight Community Tools

Community Tools

Farsight Security provides powerful DNS intelligence solutions that enable security practitioners to gain unprecedented visibility into possible attacks against their networks as well as assess possible risks associated with third-parties including supply chain vendors, partners and more. Committed to making the Internet safer for all users, Farsight Security offers both commercial and non-commercial tools.

Our free, community tools are used by leading Fortune 500 corporations and government agencies as well as top security researchers in universities, individual researchers and investigative journalists around the world. Below is a sample of our free community tools.

DNSDB

DNSDB Community Edition

Farsight DNSDB® is the world’s largest historical passive DNS database, with more than 100 billion DNS records. Starting with a single suspicious domain or IP address, security professionals can query DNSDB® to find related DNS digital artifacts, from name servers to other IP addresses or domain names, to gain new, actionable insights into an adversary’s malicious infrastructure. DNSDB Community Edition is a free, entry-level version of our flagship enterprise solution. A DNSDB API Key is required to use DNSDB Community Edition. For more details on DNSDB Community Edition, please visit here.

DNSDB Scout

DNSDB Scout

DNSDB Scout® provides a graphical user interface (GUI) for DNSDB queries within the most popular web browsers and or via our Web Edition. It is lightweight and easy to use. DNSDB Scout supports all current and future features of the DNSDB API and can be used with any version including our Enterprise Block Query and Community Edition. For more information about DNSDB Scout, please visit here.

dnsdbq

dnsdbq is a command line tool that enables DNSDB users to query DNSDB. dnsdbq displays responses in various formats. Its default query type is a “lookup” query. As an option, it can issue a “summarize” query type. Farsight Security’s DNSDB system implements both APIv1 and APIv2 interfaces. APIv1 is accessed by specifying system “dnsdb.” APIv2 is accessed by specifying system “dnsdb2”. A DNSDB API Key is required to use dnsdbq. To access dnsdbq, please visit here.

Learn more

dnsdbflex

dnsbflex is a new command line tool that enables DNSDB users to leverage the full functionality of DNSDB Flexible Search. dnsdbflex enables you to make regular expression and globbing (i.e. full wildcarding) queries to the DNSDB API. The results from dnsdbflex can be displayed directly as JSON or emitted in the dnsdbq batch file input format. Using the batch file format allows “pivoting” from flexible search into complete DNSDB results. dnsdbflex is a companion tool to dnsdbq, the DNSDB standard search command-line tool. Together they are perfect for server-based workflows and automation. A DNSDB API Key is required to use dnsdbflex. To access dnsbflex, please visit here.

Learn more

Expander

Expander is a powerful must-have easy-to-use tool for digital defenders’ arsenal looking to detect – and prevent – many types of cyberattacks against their organization. Expander can transform literal brand names, keywords, and search terms into regular expressions – precise patterns designed to match a search term’s appearance or meaning. Using these machine-generated patterns will help defenders to detect malicious activities that rely on confusing similarities. Expander is available as both a GUI and a Command Line tool to Farsight Labs members. For more details and to access Expander, please signup for Farsight Labs at labs.fsi.io. For more information about Farsight Labs, please visit here.

Learn more

Punycoder

Over the past few years, we have seen a growing number of cybercriminals using Internationalized Domain Names (IDN), a DNS standard representing non-English domain names, to commit phishing attacks and other types of cybercrime. Farsight Punycoder is a new tool that enables Security Operations Center (SOC) teams, incident responders, threat hunters and other security practitioners to validate, dissect and bi-directionally convert DNS IDN Punycode. Punycoder is available to Farsight Labs members. For more details and to access Puyncoder, please signup for Farsight Labs at labs.fsi.io. For more information about Farsight Labs, please visit here.

Learn more