search

elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
https://dnstwist.it
Apache License 2.0
4.81k stars 764 forks source link

GeoIP module no longer working #110

Closed SgtMoose closed 3 years ago

SgtMoose commented 3 years ago

It's been a little while since I've used dnstwist so I updated my brew formulae and they attempted to run my script across multiple domains. I noticed that I was getting an error that stated the following:

Error Opening file /usr/local/var/GeoIP/GeoIP.dat

I then tried to run dnstwist directly and not via a script and I get the same error just running dnstwist with no arguments.

Current version of dnstwist installed via brew is 20200916.

The version of GeoIP installed is "stable 1.6.12" and from research conducted appears to be deprecated and no longer supported.

Will GeoIP support be moved to a more updated module or removed completely?

elceef commented 3 years ago

Either GeoIP database is not present in your system or the path is wrong. Unfortunately GeoIP database/module is not going to be updated in the nearest future due to license limitations.

SgtMoose commented 3 years ago

You are correct that the GeoIP database is not present as the recent update of dnstwist from Brew also needed the GeoIP module to be updated which seems to have caused this. That being said I have seen other reports similar to what you mentioned that the GeoIP module is legacy and discontinued.

Is there a way to disable that module until the next update so dnstwist does not check for the existence of the GeoIP database files when run?

elceef commented 3 years ago

Could you please pull the most recent version from Git and test it? Hopefully the error message should be gone.

SgtMoose commented 3 years ago

dnstwist appears to be working better now. I am no longer receiving the errors.