honoki / bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
MIT License
613 stars 90 forks source link

Inaccurately handling data when providing multiple resolutions of the same domain #24

Closed honoki closed 3 years ago

honoki commented 3 years ago

IP resolutions are not correctly parsed and stored when passing multiple <domain>:<ip> records for a single IP, which leads to innacuracies in the dataset.

E.g.:

bbrf domain add test.example.com:1.1.1.1 test.example.com:2.2.2.2
bbrf show test.example.com | jq
{
  "_id": "test.example.com",
  "_rev": "1-83edf0d0046f8dd062845c996aa8488f",
  "ips": [
    "2.2.2.2"
  ],
  "type": "domain",
  "program": "example"
}

Expected would be that both resolutions of the domain are stored.