fixed #439 to add filtering to names discovered within ADS scripts

datasrcs/script.go

@@ -7,6 +7,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"regexp"
 
 	"github.com/OWASP/Amass/v3/config"
 	"github.com/OWASP/Amass/v3/eventbus"
@@ -34,16 +35,26 @@ type Script struct {
 	asn        lua.LValue
 	resolved   lua.LValue
 	subdomain  lua.LValue
+	// Regexp to match any subdomain name
+	subre *regexp.Regexp
 }
 
 // NewScript returns he object initialized, but not yet started.
 func NewScript(script string, sys systems.System) *Script {
-	s := &Script{sys: sys}
+	re, err := regexp.Compile(dns.AnySubdomainRegexString())
+	if err != nil {
+		return nil
+	}
+
+	s := &Script{
+		sys:   sys,
+		subre: re,
+	}
 	L := s.newLuaState(sys.Config())
 	s.luaState = L
 
 	// Load the script
-	err := L.DoString(script)
+	err = L.DoString(script)
 	if err != nil {
 		msg := fmt.Sprintf("Script: Failed to load script: %v", err)
 

datasrcs/script_exports.go

@@ -225,17 +225,24 @@ func (s *Script) newName(L *lua.LState) int {
 	}
 
 	lv := L.Get(2)
-	if n, ok := lv.(lua.LString); ok {
-		name := string(n)
+	n, ok := lv.(lua.LString)
+	if !ok {
+		return 0
+	}
 
-		if domain := cfg.WhichDomain(name); domain != "" {
-			bus.Publish(requests.NewNameTopic, eventbus.PriorityHigh, &requests.DNSRequest{
-				Name:   cleanName(name),
-				Domain: domain,
-				Tag:    s.SourceType,
-				Source: s.String(),
-			})
-		}
+	name := s.subre.FindString(string(n))
+	if name == "" {
+		return 0
+	}
+	cleaned := cleanName(name)
+
+	if domain := cfg.WhichDomain(cleaned); domain != "" {
+		bus.Publish(requests.NewNameTopic, eventbus.PriorityHigh, &requests.DNSRequest{
+			Name:   cleaned,
+			Domain: domain,
+			Tag:    s.SourceType,
+			Source: s.String(),
+		})
 	}
 	return 0
 }