27 lines
992 B
Python
27 lines
992 B
Python
from autorecon.plugins import ServiceScan
|
|
from shutil import which
|
|
|
|
class DnsReconSubdomainBruteforce(ServiceScan):
|
|
|
|
def __init__(self):
|
|
super().__init__()
|
|
self.name = "DnsRecon Bruteforce Subdomains"
|
|
self.slug = 'dnsrecon-brute'
|
|
self.priority = 0
|
|
self.tags = ['default', 'safe', 'long', 'dns']
|
|
|
|
def configure(self):
|
|
self.match_service_name('^domain')
|
|
|
|
def check(self):
|
|
if which('dnsrecon') is None:
|
|
self.error('The program dnsrecon could not be found. Make sure it is installed. (On Kali, run: sudo apt install dnsrecon)')
|
|
|
|
def manual(self, service, plugin_was_run):
|
|
domain_name = '<DOMAIN-NAME>'
|
|
if self.get_global('domain'):
|
|
domain_name = self.get_global('domain')
|
|
service.add_manual_command('Use dnsrecon to bruteforce subdomains of a DNS domain.', [
|
|
'dnsrecon -n {address} -d ' + domain_name + ' -D /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -t brt 2>&1 | tee {scandir}/{protocol}_{port}_dnsrecon_subdomain_bruteforce.txt',
|
|
])
|