DNS Investigation Suite

Syxx Lyin' Eyes

Every resolver tells a story. Syxx traces DNS lookups end to end — spoofed answers, poisoned caches, silent exfiltration — and shows you exactly which responses are lying.

Passive DNS index live
syxx-cages — duration 10
you@syxx ~ % sudo syxx-cages --duration 10
==================================================
Syxx Cages · DNS Query Capturer
==================================================
Target: Sniffing port 53 DNS Queries (IPv4 + IPv6)...
[SUCCESS] Sniffer started. Capturing packet streams...
What Syxx sees

Catch the resolvers that are lying

Spoof Detection
Compare answers across resolvers and flag responses that don't match authoritative truth.
Tunnel Forensics
Spot exfiltration hidden in TXT and NULL records with entropy and cadence analysis.
Resolver Timeline
Replay every hop of a lookup — cache hits, forwarders, and who answered first.
Six canonical tools, one app
Pricing

Free locally. $2 for the cloud.

Lite

Free
All local diagnostic commands, forever — Prophet, Portal, Glutton, Cage & Witness.

Pro

3-day free trial
$2 / month
Remote-anchored proxy checks — Syxx Warp web structure matching and Syxx Leak DNS privacy logging — plus Mirror remote asset comparison, on dedicated VPS resources.

Get Syxx for your Mac or PC

or download directly
macOS Tahoe 26.x · Apple Silicon · Windows 11