owasp-amass / amass

In-depth attack surface mapping and asset discovery
https://owasp.org/www-project-amass/
Other
11.51k stars 1.84k forks source link

[Feature Request] Option to perform DNS requests over HTTP / TLS #998

Open paillp opened 7 months ago

paillp commented 7 months ago

It would be great if there was an option to perform DNS enum over HTTP / TLS (DoH / DoT) such as implemented in Firefox.

This could be done by implementing Cloudflare DNS over HTTP(s) API (here).

Example with curl command line:

curl -s --http2 -H "accept: application/dns-json" "https://1.1.1.1/dns-query?name=cloudflare.com" | jq -r '.Answer[].name, .Answer[].data'

This will output:

cloudflare.com
cloudflare.com
104.16.132.229
104.16.133.229

It would be an option that applies globally (enum, intel).