blacklanternsecurity / bbot

A recursive internet scanner for hackers.
https://www.blacklanternsecurity.com/bbot/
GNU General Public License v3.0
4.19k stars 380 forks source link

Ignore Unresolved Events by MassDNS #1316

Closed amiremami closed 3 months ago

amiremami commented 3 months ago

Before starting BBOT, I gather a lot of hostnames from other tools or sites. Then will add these alltogether as target. However, I noticed, unresolved events will go through massdns instead of first checking if the hostname is valid or not.

For example, here massdns is bruteforcing all those hostnames regardless of if they are valid or not. There is no DNS record for px29ftp2.statefarm.com

image

TheTechromancer commented 3 months ago

Fixed in https://github.com/blacklanternsecurity/bbot/pull/1317.

TheTechromancer commented 3 months ago

On second thought, it makes sense to build this on top of the massdns rewrite: https://github.com/blacklanternsecurity/bbot/pull/1303 and merge it into our BBOT 2.0 branch: https://github.com/blacklanternsecurity/bbot/pull/1235.