Skip to content
This repository has been archived by the owner on Jan 7, 2024. It is now read-only.

Avoid useless requests with regexp #54

Open
gwen001 opened this issue Apr 21, 2020 · 0 comments
Open

Avoid useless requests with regexp #54

gwen001 opened this issue Apr 21, 2020 · 0 comments

Comments

@gwen001
Copy link

gwen001 commented Apr 21, 2020

Hi,

As far as I see when the option -a is not setted, a request to the host is performed when there is a match between the cname fingerprint and the host alias. However, sometimes (I think) those requests are useless.

Example: I am currently working on a bug bounty program where dozen of hosts are alias to
blabla-0708-427040690.us-east-1.elb.amazonaws.com, this trigger the s3 bucket fingerprint performing hundreds of useless requests.

A minor change could highly improved the tool. If the cname fingerprint would be a regexp like this:
\.s3[a-zA-Z0-9\-\._]*\.amazonaws\.com$

Same for heroku, could be: \.herukapp\.com$ and all others.
I think this could also avoid some false positive.

Best regards,

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant