projectdiscovery / Dnsprobe
Licence: mit
DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.
Stars: ✭ 221
Programming Languages
go
31211 projects - #10 most used programming language
Projects that are alternatives of or similar to Dnsprobe
Sonarsearch
A MongoDB importer and API for Project Sonars DNS datasets
Stars: ✭ 297 (+34.39%)
Mutual labels: dns, subdomain, bugbounty
Dictionary Of Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Stars: ✭ 492 (+122.62%)
Mutual labels: dns, subdomain, bugbounty
Amass
In-depth Attack Surface Mapping and Asset Discovery
Stars: ✭ 6,284 (+2743.44%)
Mutual labels: dns, subdomain
Subdomain3
A new generation of tool for discovering subdomains( ip , cdn and so on)
Stars: ✭ 605 (+173.76%)
Mutual labels: dns, subdomain
Fierce
A DNS reconnaissance tool for locating non-contiguous IP space.
Stars: ✭ 1,072 (+385.07%)
Mutual labels: dns, subdomain
Can I Take Over Xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Stars: ✭ 2,808 (+1170.59%)
Mutual labels: subdomain, bugbounty
Shuffledns
shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.
Stars: ✭ 498 (+125.34%)
Mutual labels: dns, subdomain
Reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Stars: ✭ 974 (+340.72%)
Mutual labels: subdomain, bugbounty
Js.org
Dedicated to JavaScript and its awesome community since 2015
Stars: ✭ 3,996 (+1708.14%)
Mutual labels: dns, subdomain
Acamar
A Python3 based single-file subdomain enumerator
Stars: ✭ 89 (-59.73%)
Mutual labels: subdomain, bugbounty
Information collection handbook
Handbook of information collection for penetration testing and src
Stars: ✭ 447 (+102.26%)
Mutual labels: dns, subdomain
Bugcrowd Levelup Subdomain Enumeration
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference
Stars: ✭ 513 (+132.13%)
Mutual labels: dns, subdomain
Aiodnsbrute
Python 3.5+ DNS asynchronous brute force utility
Stars: ✭ 370 (+67.42%)
Mutual labels: dns, subdomain
Subover
A Powerful Subdomain Takeover Tool
Stars: ✭ 607 (+174.66%)
Mutual labels: subdomain, bugbounty
Amass
In-depth Attack Surface Mapping and Asset Discovery
Stars: ✭ 1,693 (+666.06%)
Mutual labels: dns, subdomain
Getaltname
Extract subdomains from SSL certificates in HTTPS sites.
Stars: ✭ 320 (+44.8%)
Mutual labels: dns, subdomain
Subjack
Subdomain Takeover tool written in Go
Stars: ✭ 1,194 (+440.27%)
Mutual labels: subdomain, bugbounty
Note - This project is discontinued. New updates and fixes will be pushed to dnsx.
DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.
Resources
Features
- Simple and Handy utility to query DNS records.
Usage
dnsprobe -h
This will display help for the tool. Here are all the switches it supports.
| Flag | Description | Example |
|---|---|---|
| -c | Max dns retries (default 1) | dnsprobe -c 5 |
| -l | List of dns domains (optional) | dnsprobe -l domains.txt |
| -r | Request Type A, NS, CNAME, SOA, PTR, MX, TXT, AAAA | dnsprobe -r A |
| -s | List of resolvers (optional) | dnsprobe -s resolvers.txt |
| -t | Number of concurrent requests to make (default 250) | dnsprobe -t 500 |
| -f | Output type | dnsprobe -f json |
| -o | Output file (optional) | dnsprobe -o result.txt |
Installation Instructions
From Source
dnsprobe requires go1.13+ to install successfully. Run the following command to get the repo -
GO111MODULE=on go get -v github.com/projectdiscovery/dnsprobe
Running in a Docker Container
- Clone the repo using
git clone https://github.com/projectdiscovery/dnsprobe.git - Build your docker container
> docker build -t projectdiscovery/dnsprobe .
- After building the container using either way, run the following -
> docker run -it projectdiscovery/dnsprobe
For example, to query a list of domains for CNAME record and output the results to your host file system:
> cat domains.txt | docker run -i projectdiscovery/dnsprobe -r CNAME > bugcrowd.txt
Querying host for A record
To query a list of domains, you can pass the list via stdin (it also accepts full URLS, in this case the domain is extracted automatically).
> cat domains.txt | dnsprobe
cat bc.txt | dnsprobe
bounce.bugcrowd.com 192.28.152.174
blog.bugcrowd.com 104.20.4.239
blog.bugcrowd.com 104.20.5.239
www.bugcrowd.com 104.20.5.239
www.bugcrowd.com 104.20.4.239
events.bugcrowd.com 54.84.134.174
Querying host for CNAME record
> dnsprobe -l domains.txt -r CNAME
-l bc.txt -r CNAME
forum.bugcrowd.com bugcrowd.hosted-by-discourse.com.
collateral.bugcrowd.com bugcrowd.outrch.com.
go.bugcrowd.com mkto-ab270028.com.
ww2.bugcrowd.com bugcrowdinc.mktoweb.com.
researcherdocs.bugcrowd.com ssl.readmessl.com.
docs.bugcrowd.com ssl.readmessl.com.
This will run the tool against domains in domains.txt and returns the results. The tool uses the resolvers specified with -s option to perform the queries or default system resolvers.
Querying CNAME records on the Subfinder output
> subfinder -d bugcrowd.com -silent | dnsprobe -r cname
-d bugcrowd.com -silent | dnsprobe -r cname
forum.bugcrowd.com bugcrowd.hosted-by-discourse.com.
docs.bugcrowd.com ssl.readmessl.com.
go.bugcrowd.com mkto-ab270028.com.
ww2.bugcrowd.com bugcrowdinc.mktoweb.com.
researcherdocs.bugcrowd.com ssl.readmessl.com.
collateral.bugcrowd.com bugcrowd.outrch.com.
proxilate.bugcrowd.com proxilate.a.bugcrowd.com.
License
DNSProbe is made with 🖤 by the projectdiscovery team.
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].