search

punk-security / dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
GNU Affero General Public License v3.0
1.93k stars 150 forks source link

Paginate Cloudflare results #128

Closed TravisVeazey closed 1 year ago

TravisVeazey commented 1 year ago

By default, Cloudflare's API only returns the first 50(?) zones and the first 100 records in a zone. To support arbitrary numbers of zones and records, it's necessary to use "raw" requests and paginate through the results.

These changes allowed me to run this tool against our domain, testing all 212 names in our zone; prior to implementing these changes, only 100 names were tested, notably missing a takeover risk that was "hiding" in the remaining 112 names.

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication