NSEC often detects single "cloudflare" entry

blacklanternsecurity / baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery

GNU General Public License v3.0

81 stars 4 forks source link

NSEC often detects single "cloudflare" entry #434

Closed liquidsec closed 5 months ago

liquidsec commented 5 months ago

Example:

{'target': 'launcher.betfair.se', 'description': 'DNSSEC NSEC Zone Walking Enabled for domain: [launcher.betfair.se]', 'confidence': 'CONFIRMED', 'signature': 'N/A', 'indicator': 'NSEC Records', 'trigger': 'launcher.betfair.se', 'module': 'NSEC', 'found_domains': ['launcher.betfair.se', 'launcher.betfair.se.cdn.cloudflare.net']}

this should probably still be emitted as a dns_name, but we need an additional check to decide if we want to issue a vulnerability.

liquidsec commented 5 months ago

fixed in https://github.com/blacklanternsecurity/baddns/pull/435