Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

泛解析识别有误 #345

Open
lovelyjuice opened this issue Sep 6, 2023 · 0 comments
Open

泛解析识别有误 #345

lovelyjuice opened this issue Sep 6, 2023 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@lovelyjuice
Copy link

是否使用了最新代码

Bug描述
碰到有负载均衡的CDN的泛解析域名会误认为没有开启泛解析,导致引入大量垃圾数据

运行环境

  • 系统:Windows 10 x64
  • Python版本:3.9.13
  • OneForAll版本:最新版
PS D:\OneForAll> git pull
Already up to date.

如何复现
测试这2个域名:
freedom.cxf1999.com
hack-cn.com

复现命令(必写)
python .\oneforall.py --target hack-cn.com --brute True run

报错文本

19:18:45,349 [INFOR] wildcard:108 - Detecting hack-cn.com use wildcard dns record or not
19:18:45,469 [ALERT] wildcard:47 - 75c02ec2.hack-cn.com resolve to: 75c02ec2.hack-cn.com. IP: {'108.160.170.43'} TTL: 134
19:18:45,693 [ALERT] wildcard:123 - The domain hack-cn.com disables wildcard

预期结果
只要随机域名前缀能解析到任意IP,就应该判断为泛解析,并自动取消域名爆破

实际结果
清晰而简洁的实际结果描述(选写,如出现什么错误)

屏幕截图
完整OneForAll执行流程截图(建议上传)

日志上传
上传oneforall.log日志文件(复杂问题建议上传)

其他补充
当dns为谷歌dns和阿里dns时,才会出现上述IP轮换的问题,114则不会

PS C:\Users\name> nslookup fuiwfdaswe.hack-cn.com 8.8.8.8
服务器:  dns.google
Address:  8.8.8.8

非权威应答:
名称:    fuiwfdaswe.hack-cn.com
Addresses:  2001::6ca0:a63e
          104.244.46.185

PS C:\Users\name> nslookup fuiwfdaswe.hack-cn.com 8.8.8.8
服务器:  dns.google
Address:  8.8.8.8

非权威应答:
名称:    fuiwfdaswe.hack-cn.com
Addresses:  2001::68f4:2ed0
          104.244.43.167

PS C:\Users\name> nslookup fuiwfdaswe.hack-cn.com 8.8.8.8
服务器:  dns.google
Address:  8.8.8.8

非权威应答:
名称:    fuiwfdaswe.hack-cn.com
Addresses:  2001::c73b:95ef
          67.228.235.93

PS C:\Users\name> nslookup ccccccc.hack-cn.com 8.8.8.8
服务器:  dns.google
Address:  8.8.8.8

非权威应答:
名称:    ccccccc.hack-cn.com
Addresses:  2001::6ca0:a6fd
          157.240.17.36

PS C:\Users\name> nslookup dddddddd.hack-cn.com 8.8.8.8
服务器:  dns.google
Address:  8.8.8.8

非权威应答:
名称:    dddddddd.hack-cn.com
Addresses:  2001::44e:8b32
          185.60.216.50
@lovelyjuice lovelyjuice added the bug Something isn't working label Sep 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants