Canary to filter DNS Addresses

[n0x00]

Don't kill me...

would there be any value in adding a canary?
random string or user supplied...

If the target resolves every name provided in the list those that have the same IP as the canary domain automatically get stripped out , suppressed,hidden whatnot

[OJ]

We already have that feature built in, but it does it by itself rather than having a user-supplied value. See here: https://github.com/OJ/gobuster/blob/master/main.go#L488

Is that what you mean?

[n0x00]

yeah but I've have had cases where with the -fw switch set it continues to resolve all names in the list and I have to sort by removing all IP Addresses with the non-existent subs

can show you, but not on here if that's okay ?

using: gobuster -m dns -u domain.com -t 20 -w /path/to/list.lst -I -fw

[OJ]

Sure, hit me on Skype.

[OJ]

hey @n0x00 can you let me know the deets of this so we can move ahead with it mate? Thanks!

[n0x00]

dude, dont laugh... i'm totally locked out of my github :D phone broke, 2fa ... no back up codezzzz

…

On Mon, Oct 30, 2017 at 12:56 AM, OJ Reeves ***@***.***> wrote: hey @n0x00 <https://github.com/n0x00> can you let me know the deets of this so we can move ahead with it mate? Thanks! — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#38 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABO3MIVfBPiYO9F54AllHOAf4smzRjSSks5sxR66gaJpZM4LZILa> .

[n0x00]

I will hit you up on skype soon tho ! and ... find a domain we can example On Tue, Oct 31, 2017 at 5:20 PM, John Carroll < agent@thegentlemanhackersclub.com> wrote:

…

dude, dont laugh... i'm totally locked out of my github :D phone broke, 2fa ... no back up codezzzz On Mon, Oct 30, 2017 at 12:56 AM, OJ Reeves ***@***.***> wrote: > hey @n0x00 <https://github.com/n0x00> can you let me know the deets of > this so we can move ahead with it mate? Thanks! > > — > You are receiving this because you were mentioned. > Reply to this email directly, view it on GitHub > <#38 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/ABO3MIVfBPiYO9F54AllHOAf4smzRjSSks5sxR66gaJpZM4LZILa> > . >