search

blacklanternsecurity / baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery
GNU General Public License v3.0
92 stars 5 forks source link

Handle NSEC wildcards #419

Closed liquidsec closed 6 months ago

liquidsec commented 7 months ago

Sadly, yes, this is a thing.

We just need to NOT include the domain if it is the same as its source domain. This should make the total results of the walk zero and prevent a FP.

liquidsec commented 6 months ago

fixed in https://github.com/blacklanternsecurity/baddns/pull/420/commits/45857380475cfe204afe71bf133f79b9ac6d8ad7