mandatoryprogrammer / TLDR

TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.
520 stars 53 forks source link

UPDATE - THIS IS NO LONGER IN OPERATION.

This archive is no longer being updated with new zone files. See https://github.com/flotwig/TLDR-2 for an actively updated fork of this project.

TLDR - A Continuously Updated Historical TLD Records Archive

This repository is updated approximately every two hours with the results from DNS zone transfer attempts against the root nameservers and all existing TLD servers. This is done to keep record of zone files for various TLDs and to monitor how these zones change overtime.

View Changes in TLD DNS Data

Click here to view the list of commits and see how the various TLD & root zones change overtime.

View List of TLDs & Roots With Zone Transfers Enabled

Click here to view the list of nameservers with zone transfers enabled.

Zone Transfers for Roots and TLDs

Allowing global zone transfers is sometimes considered a security vulnerability due to this functionality giving attackers the ability to easily enumerate all DNS zone data for a specific domain. This is often seen as an issue for system administrators who want to make enumeration of sub-domains and other DNS data hard for malicious actors.

However, when it comes to TLDs and the root nameservers, zone transfers are shown in a different light. Zone transfers at this level can be benificial as they are an easy way for a TLD to be transparent about its DNS changes. This project is not meant to encourage TLD DNS hosting providers to disable global zone transfers but rather to gather data on the ever-changing zone information for the Internet's TLDs.

Credit

This project was inspired by Peter Bowen's work which can be found here: https://github.com/pzb/TLDs