search

d3mondev / puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
GNU General Public License v3.0
1.73k stars 160 forks source link

Wildcard root question #38

Closed riramar closed 1 year ago

riramar commented 1 year ago

Thanks for the amazing tool! When you have multiple subdomains under the same wildcard root, puredns won't return any subdomain. For example:

au.site.yahoo.com matrixcollectibles.site.yahoo.com

Wouldn't be interesting to return at least one subdomain from the list above? If an user is filtering valid domains for security testing, he/she could miss valid subdomains from wildcard roots domains.

d3mondev commented 1 year ago

Hi,

Unfortunately this is not something that puredns can detect by looking at the DNS entries. It would require a tool that fetches the web page and compares the results, which it is not suited for. I would probably use ffuf or something similar instead?