from autorecon.plugins import ServiceScan from shutil import which class DnsReconSubdomainBruteforce(ServiceScan): def __init__(self): super().__init__() self.name = "DnsRecon Bruteforce Subdomains" self.slug = 'dnsrecon-brute' self.priority = 0 self.tags = ['default', 'safe', 'long', 'dns'] def configure(self): self.match_service_name('^domain') def check(self): if which('dnsrecon') is None: self.error('The program dnsrecon could not be found. Make sure it is installed. (On Kali, run: sudo apt install dnsrecon)') return False def manual(self, service, plugin_was_run): domain_name = '' if self.get_global('domain'): domain_name = self.get_global('domain') service.add_manual_command('Use dnsrecon to bruteforce subdomains of a DNS domain.', [ 'dnsrecon -n {address} -d ' + domain_name + ' -D /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -t brt 2>&1 | tee {scandir}/{protocol}_{port}_dnsrecon_subdomain_bruteforce.txt', ])