From 5fcbb169b4575fc6f3e4f1559ad417be96a692c5 Mon Sep 17 00:00:00 2001 From: Tib3rius <48113936+Tib3rius@users.noreply.github.com> Date: Wed, 18 Aug 2021 18:44:26 -0400 Subject: [PATCH] Added DNS Reverse Lookup plugin Also renamed Zone Transfer plugin to DNS Zone Transfer. --- plugins/dns.py | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) diff --git a/plugins/dns.py b/plugins/dns.py index 46c2b99..45d3b3b 100644 --- a/plugins/dns.py +++ b/plugins/dns.py @@ -13,11 +13,11 @@ class DNS(ServiceScan): async def run(self, service): await service.execute('nmap {nmap_extra} -sV -p {port} --script="banner,(dns* or ssl*) and not (brute or broadcast or dos or external or fuzzer)" -oN "{scandir}/{protocol}_{port}_dns_nmap.txt" -oX "{scandir}/xml/{protocol}_{port}_dns_nmap.xml" {address}') -class ZoneTransfer(ServiceScan): +class DNSZoneTransfer(ServiceScan): def __init__(self): super().__init__() - self.name = "Zone Transfer" + self.name = "DNS Zone Transfer" self.tags = ['default', 'dns'] def configure(self): @@ -28,4 +28,17 @@ class ZoneTransfer(ServiceScan): if self.get_option('domain') is None: await service.execute('dig AXFR -p {port} @{address}', outfile='{protocol}_{port}_dns_zone-transfer.txt') else: - await service.execute('dig AXFR ' + self.get_option('domain') + ' -p {port} @{address}', outfile='{protocol}_{port}_dns_zone-transfer.txt') + await service.execute('dig AXFR -p {port} @{address} ' + self.get_option('domain'), outfile='{protocol}_{port}_dns_zone-transfer.txt') + +class DNSReverseLookup(ServiceScan): + + def __init__(self): + super().__init__() + self.name = "DNS Reverse Lookup" + self.tags = ['default', 'dns'] + + def configure(self): + self.match_service_name('^domain') + + async def run(self, service): + await service.execute('dig -p {port} -x {address} @{address}', outfile='{protocol}_{port}_dns_reverse-lookup.txt')