Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

scripts/dns-brute: Adds wildcard detection for A and AAAA records. #950

wants to merge 1 commit into from


Copy link

@aars aars commented Jul 25, 2017


The dns-brute script will happily list all configured hosts if a domain uses a wildcard record.

This PR adds detection for A and AAAA wildcards, and disables the type of record it thinks is a wildcard. I've added script arg dns-brute.force to override this.

All and any feedback is welcome. If I can improve this somehow (some built-in random string generation maybe? (I found stdnse.generate_random_string)) please let me know!


Copy link

aars commented Jul 25, 2017

PS: I was unable to find any tests for this (or other scripts). If I missed those, please point me in the right direction.

@aars aars force-pushed the script-dns-brute-detect-wildcards branch from de2df18 to 4764fcb Compare July 25, 2017 13:40
Copy link

dmiller-nmap commented Jul 27, 2017 via email

@nmap-bot nmap-bot closed this in 1139e8b Jul 27, 2017
Copy link

aars commented Jul 27, 2017

Ah! Good call on checking against the wildcard address. That's very useful! Cheers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
None yet
None yet

Successfully merging this pull request may close these issues.

None yet

2 participants