blechschmidt / massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
GNU General Public License v3.0
3.08k stars 460 forks source link

Sometimes massdns doesn't seem to work properly. #64

Closed shmilylty closed 4 years ago

shmilylty commented 4 years ago

My test domain is guahao.com

Authoritative DNS nameservers of guahao.com in is: ns3.dnsv4.com and ns4.dnsv4.com

root@kali:~/Desktop/massdns# dig guahao.com ns

; <<>> DiG 9.11.5-P4-3-Debian <<>> guahao.com ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6183
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;guahao.com.            IN  NS

;; ANSWER SECTION:
guahao.com.     5   IN  NS  ns3.dnsv4.com.
guahao.com.     5   IN  NS  ns4.dnsv4.com.

;; Query time: 469 msec
;; SERVER: 192.168.197.2#53(192.168.197.2)
;; WHEN: Sat Mar 28 14:39:24 EDT 2020
;; MSG SIZE  rcvd: 70

The A record of the authoritative DNS name server is

162.14.18.121
129.211.176.242
183.232.90.141
52.74.43.18
14.215.150.14
61.151.180.49
59.36.120.145
61.129.8.140
52.74.43.18
14.215.150.15
111.30.142.18
223.166.151.14
125.39.45.245
61.151.180.50
223.166.151.15
162.14.18.188
58.251.86.11

I can use dig to query any subdomain under guahao.com

root@kali:~/Desktop/massdns# dig bbs.guahao.com @14.215.150.15

; <<>> DiG 9.11.5-P4-3-Debian <<>> bbs.guahao.com @14.215.150.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30045
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 453918193b536bf0 (echoed)
;; QUESTION SECTION:
;bbs.guahao.com.            IN  A

;; ANSWER SECTION:
bbs.guahao.com.     600 IN  CNAME   bbs.guahao.com.cdn.dnsv1.com.

;; AUTHORITY SECTION:
guahao.com.     86400   IN  NS  ns4.dnsv4.com.
guahao.com.     86400   IN  NS  ns3.dnsv4.com.

;; Query time: 44 msec
;; SERVER: 14.215.150.15#53(14.215.150.15)
;; WHEN: Sat Mar 28 14:47:26 EDT 2020
;; MSG SIZE  rcvd: 151

But massdns always has no results, and there are no results until the end of the run.

Processed queries: 676
Received packets: 0
Progress: 100.00% (00 h 00 min 26 sec / 00 h 00 min 26 sec)
Current incoming rate: 0 pps, average: 0 pps
Current success rate: 0 pps, average: 0 pps
Finished total: 676, success: 0 (0.00%)
Mismatched domains: 0 (0.00%), IDs: 0 (0.00%)
Failures: 0: 0.00%, 1: 0.00%, 2: 0.00%, 3: 0.00%, 4: 0.00%, 5: 0.00%, 6: 0.00%, 7: 0.00%, 8: 0.00%, 9: 0.00%, 10: 0.00%, 11: 0.00%, 12: 0.00%, 13: 0.00%, 14: 0.00%, 15: 0.00%, 16: 0.00%, 17: 0.00%, 18: 0.00%, 19: 0.00%, 20: 0.00%, 21: 0.00%, 22: 0.00%, 23: 0.00%, 24: 0.00%, 25: 0.00%, 26: 0.00%, 27: 0.00%, 28: 0.00%, 29: 0.00%, 30: 0.00%, 31: 0.00%, 32: 0.00%, 33: 0.00%, 34: 0.00%, 35: 0.00%, 36: 0.00%, 37: 0.00%, 38: 0.00%, 39: 0.00%, 40: 0.00%, 41: 0.00%, 42: 0.00%, 43: 0.00%, 44: 0.00%, 45: 0.00%, 46: 0.00%, 47: 0.00%, 48: 0.00%, 49: 0.00%, 50: 100.00%, 
Response: | Success:               | Total:
OK:       |            0 (  0.00%) |            0 (  0.00%)
NXDOMAIN: |            0 (  0.00%) |            0 (  0.00%)
SERVFAIL: |            0 (  0.00%) |            0 (  0.00%)
REFUSED:  |            0 (  0.00%) |            0 (  0.00%)
FORMERR:  |            0 (  0.00%) |            0 (  0.00%)

My command is D:\OneForAll\oneforall\thirdparty\massdns\windows\x64\massdns_windows_amd64.exe --status-format ansi --processes 1 --socket-count 1 --resolvers D:\OneForAll\oneforall\data\authoritative_dns.txt --resolve-count 50 --type A --flush --output J --outfile D:\OneForAll\oneforall\thirdparty\massdns\temp\resolved_result_guahao.com_20200329_024745.json --error-log D:\OneForAll\oneforall\thirdparty\massdns\temp\massdns_error_log.txt D:\OneForAll\oneforall\thirdparty\massdns\temp\generated_subdomains_guahao.com_20200329_024745.txt authoritative_dns.txt generated_subdomains_guahao.com_20200329_024745.txt

Looking forward to your reply very much, thank you!😊

blechschmidt commented 4 years ago

You have generated a subdomain list for guhao.com instead of guahao.com.

aa.guhao.com
ab.guhao.com
ac.guhao.com
ad.guhao.com
...