mzfr / takeover

A tool for testing subdomain takeover possibilities at a mass scale.
BSD 2-Clause "Simplified" License
45 stars 10 forks source link

rewrite to use output of massdns #11

Closed mzfr closed 3 years ago

mzfr commented 3 years ago

The idea here is that instead of just passing a long list of subdomains that may or may not resolve we should instead take input from tools like massdns or zdns. These tools are meant for the resolving process at a much higher rate than any other tool.

We can do something like:

Untitled Diagram

possible issue

The only possible issue I can think of is that others might have the output format differently. They might also be storing IP address etc so parsing that may be a bit tricky. Other than that I think this may be a better and faster way to check for takeovers.

mzfr commented 3 years ago

Okay reading this now seems like a not so good idea because the only thing that will be changing here is that instead of using following line:

TargetCNAME, err := net.LookupCNAME(target)

I'll be using output of massdns and that makes it sound a weird