Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't add noise to the output file #27

Closed
AlexanderMac opened this issue May 8, 2021 · 4 comments
Closed

Don't add noise to the output file #27

AlexanderMac opened this issue May 8, 2021 · 4 comments

Comments

@AlexanderMac
Copy link

AlexanderMac commented May 8, 2021

The tool adds noise in the output file even verbose flag is not set. It's ok to print verbose output to console, but not in file.

I run dnscan with the following args:

dnscan -d example.com -D -o sds.txt

The content of sds.txt:

[*] Processing domain example.com
[*] Using system resolvers ['127.0.0.53']
[+] Getting nameservers
199.43.133.53 - b.iana-servers.net
199.43.135.53 - a.iana-servers.net
[-] Zone transfer failed

[+] IPv6 (AAAA) records found. Try running dnscan with the -6 option.
2606:2800:220:1:248:1893:25c8:1946
[+] TXT records found
"v=spf1 -all"
"8j5nfqld20zpcyr8xjw0ydcfq9rk8hgm"
[-] Invalid DNSKEY record length

[+] MX records found, added to target list
0 .
[*] Scanning example.com for A records
example.com - 93.184.216.34
www.example.com - 93.184.216.34

If you agree with this change, I'll be happy to create a PR.

@rbsec
Copy link
Owner

rbsec commented May 21, 2021

Looking at your fork, am I correct in thinking that you essentially want an option that disables all of the checks other than the axfr and subdomain grinding, and that only prints subdomain - ip in the output file?

@AlexanderMac
Copy link
Author

Exactly, only subdomain - ip. But I don't suggest adding a new option, I think that it would be ideal to write only subdomain - ip to output file.

rbsec added a commit that referenced this issue May 21, 2021
@rbsec
Copy link
Owner

rbsec commented May 21, 2021

I'm not keen on making that the default mode - even though not everyone is interested in the NS/TXT/MX/DNSSEC/etc scans, they provide a lot of valuable information, and I don't like making major changes to the default behaviour that people's workflows (including my own) rely on.

I've added a -q / --quick mode in 5a48a3e which disables everything other than the zone transfer and subdomain scanning, and reduces the file output (assuming you specify -o) to just subdomain - ip - hopefully this meets your objective.

@AlexanderMac
Copy link
Author

Cool, thank you for this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants