diff --git a/bbot/modules/dnsdumpster.py b/bbot/modules/dnsdumpster.py index 5c0ae29041..2a5b7539b0 100644 --- a/bbot/modules/dnsdumpster.py +++ b/bbot/modules/dnsdumpster.py @@ -1,4 +1,4 @@ -import re +import json from bbot.modules.templates.subdomain_enum import subdomain_enum @@ -15,78 +15,61 @@ class dnsdumpster(subdomain_enum): base_url = "https://dnsdumpster.com" + async def setup(self): + self.apikey_regex = self.helpers.re.compile(r'
\n
Hosting (IP block owners)
\nGeoIP of Host Locations
\n \nMX Records ** This is where email for the domain goes...
\n| asdf.blacklanternsecurity.com.mail.protection.outlook.com. \n\n\n | 104.47.55.138 mail-bn8nam120138.inbound.protection.outlook.com | MICROSOFT-CORP-MSN-AS-BLOCK United States |
TXT Records ** Find more hosts in Sender Policy Framework (SPF) configurations
\n| "MS=ms26206678" |
| "v=spf1 ip4:50.240.76.25 include:spf.protection.outlook.com -all" |
| "google-site-verification=O_PoQFTGJ_hZ9LqfNT9OEc0KPFERKHQ_1t1m0YTx_1E" |
| "google-site-verification=7XKUMxJSTHBSzdvT7gH47jLRjNAS76nrEfXmzhR_DO4" |
Host Records (A) ** this data may not be current as it uses a static database (updated monthly)
\nDNSdumpster.com is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
\n\nThe ability to quickly identify the attack surface is essential. Whether you are penetration testing or chasing bug bounties.
\nNetwork defenders benefit from passive reconnaissance in a number of ways. With analysis informing information security strategy.
\nUnderstanding network based OSINT helps information technologists to better operate, assess and manage the network.
\nMap an organizations attack surface with a virtual dumpster dive* of the DNS records associated with the target organization.
\n*DUMPSTER DIVING: The practice of sifting refuse from an office or technical installation to extract confidential data, especially security-compromising information.
\nThe company behind DNSDumpster is hackertarget.com where we provide online hosted access to trusted open source security vulnerability scanners and network intelligence tools.
Save time and headaches by incorporating our attack surface discovery into your vulnerability assessment process.
\n\nNo brute force subdomain enumeration is used as is common in dns recon tools that enumerate subdomains. We use open source intelligence resources to query for related domain data. It is then compiled into an actionable resource for both attackers and defenders of Internet facing systems.
\nMore than a simple DNS lookup this tool will discover those hard to find sub-domains and web hosts. The search relies on data from our crawls of the Alexa Top 1 Million sites, Search Engines, Common Crawl, Certificate Transparency, Max Mind, Team Cymru, Shodan and scans.io.
\n\nOver at hackertarget.com there\'s a tool we call domain profiler. This compiles data similar to DNSDumpster; with additional data discovery. Queries available are based on the membership plan with the number of results (subdomains) being unlimited. With a STARTER membership you have access to the domain profiler tool for 12 months. Once the years membership expires you will revert to BASIC member status, however access to Domain Profiler and Basic Nmap scans continue. The BASIC access does not expire.
\n\nThere are some great open source recon frameworks that have been developed over the past couple of years. In addition tools such as Metasploit and Nmap include various modules for enumerating DNS. Check our Getting Started with Footprinting for more information.
\n\n