Project Logo

The Lupaxa Security Toolbox
Part of The Lupaxa Project


lupaxa-zone-transfer

Test whether a domain's nameservers allow DNS zone transfer (AXFR), and show the zone contents when they do.

Warning — authorised use only. This tool contacts nameservers and can expose a full zone. Use it only on systems you are allowed to test.

Features

  • Discover authoritative NS records or use repeatable --nameserver values
  • Sort nameservers by name; for each host, try IPv4 before IPv6
  • Resolve every IPv4 and IPv6 address for nameserver hostnames
  • Try AXFR against every discovered endpoint
  • Report allowed, refused, and error outcomes
  • Print transferred records with name, type, TTL, and rdata
  • Human-readable table (colour on a TTY; --no-color or NO_COLOR to disable), or JSON
  • Spinner on stderr while nameserver lookup and AXFR run (TTY only)
  • Optional --fail-open exit status for CI-style security findings
  • Library API (inspect_domain / inspect_many) and CLI (zone-transfer)
  • Fully typed, linted, formatted, and tested

Installation

From PyPI

pip install lupaxa-zone-transfer

From source (development mode)

pip install -e ".[dev]"

Requires Python 3.10+. Runtime dependencies: dnspython, prettytable, and colored.

Library quick start

from lupaxa.zone_transfer import inspect_domain

report = inspect_domain("example.com")
print(report.attempts[0].status)

CLI quick start

zone-transfer --help
zone-transfer example.com
zone-transfer example.com example.org
zone-transfer example.com --nameserver ns1.example.net --nameserver 203.0.113.10
zone-transfer example.com --format json
zone-transfer example.com --fail-open
zone-transfer example.com --timeout 10 --no-color

You can also run the CLI as a module:

python -m lupaxa.zone_transfer --help
python -m lupaxa.zone_transfer --version

Documentation

Online documentation:

Documentation

Source repository:

GitHub

Serve docs locally

From a clone of the repository:

make mkdocs-serve

Then open the local URL printed by MkDocs in your browser.

Development

Clone the repository and install with Make:

make init                # first-time makefile-skills checkout
make python-install-dev  # editable install with [dev]
make python-check        # lint, type-check, and test
The Lupaxa Project Footer

Project links

Data verified by PyPI on Sep 9, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for lupaxa from gravatar.com lupaxa

Credits

Author: The Lupaxa Project

GitHub Statistics

Data verified by PyPI on Sep 9, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

MIT License (MIT License)

Requires

Python >=3.10

Provides Extra

dev test

Tags

axfr cli dns security zone-transfer

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

lupaxa_zone_transfer-0.1.0.tar.gz (11.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

lupaxa_zone_transfer-0.1.0-py3-none-any.whl (14.7 kB view details)

Uploaded Python 3

File details

Details for the file lupaxa_zone_transfer-0.1.0.tar.gz.

File metadata

  • Download URL: lupaxa_zone_transfer-0.1.0.tar.gz
  • Upload date:
  • Size: 11.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for lupaxa_zone_transfer-0.1.0.tar.gz
Algorithm Hash digest
SHA256 adb171766c6056c3eee019aec0c5bff3845db8024d31a2a7ce31b17391a6df10
MD5 be3b53a03e71c9468b85c2caeb892e58
BLAKE2b-256 b96308155f4a9f2dee321442e347be4405b424dd9849ca066b38471eea68331f

See more details on using hashes here.

Provenance

The following attestation bundles were made for lupaxa_zone_transfer-0.1.0.tar.gz:

Publisher: generate-release.yml on lupaxa-security-toolbox/zone-transfer

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file lupaxa_zone_transfer-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for lupaxa_zone_transfer-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 f470a81c6282ebe85a5a140e82bea36ad740c358123cb7f0cf33d4d07b3df469
MD5 286e21b2f7c24b37785b9860f9b67e19
BLAKE2b-256 94190533578d6c6337e92a1e1c6aa99f108f0e85031c701ffddc88cbfef62b91

See more details on using hashes here.

Provenance

The following attestation bundles were made for lupaxa_zone_transfer-0.1.0-py3-none-any.whl:

Publisher: generate-release.yml on lupaxa-security-toolbox/zone-transfer

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page