MilindPurswani / Syborg

Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)
142 stars 22 forks source link

Too many false positives if *.domain.com is found #2

Closed MilindPurswani closed 4 years ago

MilindPurswani commented 4 years ago

It was observed that if a subdomain is configured as:

*.domain.com <ipaddress>

In such cases all subdomains will be resolved to the IP address, which doesn't mean that they are distinct and valuable.

We should probably need to incorporate seek first with a random string to check for such loopholes?