shmilylty / OneForAll

OneForAll是一款功能强大的子域收集工具
GNU General Public License v3.0
7.93k stars 1.27k forks source link

移除能够解析随机字符串的域名 #385

Open lovelyjuice opened 6 days ago

lovelyjuice commented 6 days ago

是否使用了最新代码

Bug描述 泛解析无法识别某些域名,当一个域名开启了泛解析并存在负载均衡的时候,oneforall会耗尽系统资源并崩溃

运行环境 debian12(linux 6.1.0-17-amd64)

如何复现 复现步骤(选写)

复现命令(必写) 开启递归爆破,递归深度为2 python3 oneforall.py --Brute True --target hcwmw.cn run 报错文本

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig wpfads.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> wpfads.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31173
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;wpfads.hcwmw.cn.               IN      A

;; ANSWER SECTION:
wpfads.hcwmw.cn.        10      IN      A       67.21.89.51

;; Query time: 88 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:40:26 CST 2024
;; MSG SIZE  rcvd: 49

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig iop2389r.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> iop2389r.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42624
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;iop2389r.hcwmw.cn.             IN      A

;; ANSWER SECTION:
iop2389r.hcwmw.cn.      10      IN      A       64.32.10.25

;; Query time: 176 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:40:35 CST 2024
;; MSG SIZE  rcvd: 51

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig opj98iuoiouhniouhiou.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> opj98iuoiouhniouhiou.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17312
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;opj98iuoiouhniouhiou.hcwmw.cn. IN      A

;; ANSWER SECTION:
opj98iuoiouhniouhiou.hcwmw.cn. 10 IN    A       64.32.10.26

;; Query time: 176 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:41:04 CST 2024

预期结果 剔除该域名

实际结果 result.sqlite 把我服务器硬盘占满了

屏幕截图

18:30:13,971 [ALERT] brute:451 - Brute module takes 3.3 seconds, found 3922 subdomains of stroke.hcwmw.cn                      [131/1939]
18:30:15,367 [INFOR] brute:410 - Blasting veil.hcwmw.cn
18:30:15,368 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:15,376 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:15,377 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:15,377 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:15,378 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:15,378 [INFOR] wildcard:159 - Collecting wildcard dns record for veil.hcwmw.cn
18:30:15,378 [INFOR] brute:347 - Generating dictionary for veil.hcwmw.cn
18:30:15,457 [ALERT] utils:695 - Please check whether mizanian.veil.hcwmw.cn is correct or not
18:30:15,461 [INFOR] brute:365 - Dictionary size: 95247
18:30:15,503 [INFOR] brute:441 - Running massdns to brute subdomains
18:30:18,504 [INFOR] brute:197 - Counting IP cname appear times
18:30:18,517 [INFOR] brute:238 - Processing result
18:30:18,559 [ALERT] brute:451 - Brute module takes 3.2 seconds, found 3176 subdomains of veil.hcwmw.cn
18:30:19,973 [INFOR] brute:410 - Blasting wavlsi.hcwmw.cn
18:30:19,974 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:19,980 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:19,981 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:19,981 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:19,982 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:19,982 [INFOR] wildcard:159 - Collecting wildcard dns record for wavlsi.hcwmw.cn
18:30:19,983 [INFOR] brute:347 - Generating dictionary for wavlsi.hcwmw.cn
18:30:20,068 [ALERT] utils:695 - Please check whether essca.wavlsi.hcwmw.cn is correct or not
18:30:20,071 [INFOR] brute:365 - Dictionary size: 95247
18:30:20,118 [INFOR] brute:441 - Running massdns to brute subdomains
18:30:22,062 [INFOR] brute:197 - Counting IP cname appear times
18:30:22,070 [INFOR] brute:238 - Processing result
18:30:22,096 [ALERT] brute:451 - Brute module takes 2.1 seconds, found 1611 subdomains of wavlsi.hcwmw.cn
18:30:23,527 [INFOR] brute:410 - Blasting shannon.hcwmw.cn
18:30:23,528 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:23,536 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:23,536 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:23,537 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:23,538 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:23,538 [INFOR] wildcard:159 - Collecting wildcard dns record for shannon.hcwmw.cn
18:30:23,538 [INFOR] brute:347 - Generating dictionary for shannon.hcwmw.cn
18:30:23,618 [ALERT] utils:695 - Please check whether pinglun.shannon.hcwmw.cn is correct or not
18:30:23,621 [INFOR] brute:365 - Dictionary size: 95247
18:30:23,665 [INFOR] brute:441 - Running massdns to brute subdomains

日志上传 上传oneforall.log日志文件(复杂问题建议上传)

其他补充 关于bug的其他一些补充说明