-
-
Notifications
You must be signed in to change notification settings - Fork 928
Expand file tree
/
Copy pathresolv-sample.conf
More file actions
60 lines (53 loc) 路 2.38 KB
/
Copy pathresolv-sample.conf
File metadata and controls
60 lines (53 loc) 路 2.38 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
# ============================================================================
# Sample /etc/resolv.conf for BBOT
# ============================================================================
#
# BBOT's DNS engine (blastdns) automatically spins up ten workers per
# resolver listed here. Adding more resolvers = more parallelism =
# faster scans.
#
# To use: copy (or append) to /etc/resolv.conf, or point your
# systemd-resolved / resolvconf config at these addresses.
# ============================================================================
# --- Google Public DNS ---
# No filtering, DNSSEC-validating, DoH/DoT capable.
# Huge anycast footprint for geographically relevant answers.
nameserver 8.8.8.8
nameserver 8.8.4.4
# --- Cloudflare 1.1.1.1 ---
# Unfiltered, DNSSEC, very fast, DoH/DoT.
# NOTE: Avoid 1.1.1.2 / 1.1.1.3 -- those variants apply malware
# and adult-content filtering, which will hide results during OSINT.
nameserver 1.1.1.1
nameserver 1.0.0.1
# --- Quad9 (unfiltered) ---
# IMPORTANT: Quad9's main address (9.9.9.9) blocks known-malicious
# domains -- exactly what you do NOT want when pivoting on adversary
# infrastructure. The .10 addresses are their no-blocklist,
# no-DNSSEC-validation variant, which lets you see raw responses
# without validation stripping records.
nameserver 9.9.9.10
nameserver 149.112.112.10
# --- OpenDNS "Sandbox" (unfiltered) ---
# Cisco Umbrella's unfiltered pair. The well-known 208.67.222.222
# enforces category filtering; the .2 addresses do not.
nameserver 208.67.222.2
nameserver 208.67.220.2
# --- Verisign Public DNS ---
# Run by the .com / .net registry operator.
# No filtering, no NXDOMAIN hijacking, DNSSEC.
nameserver 64.6.64.6
nameserver 64.6.65.6
# --- Hurricane Electric ---
# Unfiltered, strong IPv6 support, well-regarded in the netops community.
nameserver 74.82.42.42
# ============================================================================
# IPv6 equivalents (uncomment if your host has IPv6 connectivity)
# ============================================================================
# nameserver 2001:4860:4860::8888 # Google
# nameserver 2001:4860:4860::8844 # Google
# nameserver 2606:4700:4700::1111 # Cloudflare
# nameserver 2606:4700:4700::1001 # Cloudflare
# nameserver 2620:fe::10 # Quad9 (unfiltered)
# nameserver 2620:fe::fe:10 # Quad9 (unfiltered)
# nameserver 2001:470:20::2 # Hurricane Electric