Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

移除能够解析随机字符串的域名 #385

Open
lovelyjuice opened this issue Jul 1, 2024 · 0 comments
Open

移除能够解析随机字符串的域名 #385

lovelyjuice opened this issue Jul 1, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@lovelyjuice
Copy link

是否使用了最新代码

Bug描述
泛解析无法识别某些域名,当一个域名开启了泛解析并存在负载均衡的时候,oneforall会耗尽系统资源并崩溃

运行环境
debian12(linux 6.1.0-17-amd64)

  • Python版本:Python 3.11.2(必写)
  • OneForAll版本:最新git clone的(必写)

如何复现
复现步骤(选写)

复现命令(必写)
开启递归爆破,递归深度为2
python3 oneforall.py --Brute True --target hcwmw.cn run
报错文本

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig wpfads.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> wpfads.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31173
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;wpfads.hcwmw.cn.               IN      A

;; ANSWER SECTION:
wpfads.hcwmw.cn.        10      IN      A       67.21.89.51

;; Query time: 88 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:40:26 CST 2024
;; MSG SIZE  rcvd: 49

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig iop2389r.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> iop2389r.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42624
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;iop2389r.hcwmw.cn.             IN      A

;; ANSWER SECTION:
iop2389r.hcwmw.cn.      10      IN      A       64.32.10.25

;; Query time: 176 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:40:35 CST 2024
;; MSG SIZE  rcvd: 51

root@iZ7xv2p2hxfv1dsnfuvwm9Z:~# dig opj98iuoiouhniouhiou.hcwmw.cn

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> opj98iuoiouhniouhiou.hcwmw.cn
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17312
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;opj98iuoiouhniouhiou.hcwmw.cn. IN      A

;; ANSWER SECTION:
opj98iuoiouhniouhiou.hcwmw.cn. 10 IN    A       64.32.10.26

;; Query time: 176 msec
;; SERVER: 100.100.2.136#53(100.100.2.136) (UDP)
;; WHEN: Mon Jul 01 18:41:04 CST 2024

预期结果
剔除该域名

实际结果
result.sqlite 把我服务器硬盘占满了

屏幕截图

18:30:13,971 [ALERT] brute:451 - Brute module takes 3.3 seconds, found 3922 subdomains of stroke.hcwmw.cn                      [131/1939]
18:30:15,367 [INFOR] brute:410 - Blasting veil.hcwmw.cn
18:30:15,368 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:15,376 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:15,377 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:15,377 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:15,378 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:15,378 [INFOR] wildcard:159 - Collecting wildcard dns record for veil.hcwmw.cn
18:30:15,378 [INFOR] brute:347 - Generating dictionary for veil.hcwmw.cn
18:30:15,457 [ALERT] utils:695 - Please check whether mizanian.veil.hcwmw.cn is correct or not
18:30:15,461 [INFOR] brute:365 - Dictionary size: 95247
18:30:15,503 [INFOR] brute:441 - Running massdns to brute subdomains
18:30:18,504 [INFOR] brute:197 - Counting IP cname appear times
18:30:18,517 [INFOR] brute:238 - Processing result
18:30:18,559 [ALERT] brute:451 - Brute module takes 3.2 seconds, found 3176 subdomains of veil.hcwmw.cn
18:30:19,973 [INFOR] brute:410 - Blasting wavlsi.hcwmw.cn
18:30:19,974 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:19,980 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:19,981 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:19,981 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:19,982 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:19,982 [INFOR] wildcard:159 - Collecting wildcard dns record for wavlsi.hcwmw.cn
18:30:19,983 [INFOR] brute:347 - Generating dictionary for wavlsi.hcwmw.cn
18:30:20,068 [ALERT] utils:695 - Please check whether essca.wavlsi.hcwmw.cn is correct or not
18:30:20,071 [INFOR] brute:365 - Dictionary size: 95247
18:30:20,118 [INFOR] brute:441 - Running massdns to brute subdomains
18:30:22,062 [INFOR] brute:197 - Counting IP cname appear times
18:30:22,070 [INFOR] brute:238 - Processing result
18:30:22,096 [ALERT] brute:451 - Brute module takes 2.1 seconds, found 1611 subdomains of wavlsi.hcwmw.cn
18:30:23,527 [INFOR] brute:410 - Blasting shannon.hcwmw.cn
18:30:23,528 [INFOR] brute:119 - Querying NS records of hcwmw.cn
18:30:23,536 [ERROR] brute:125 - ('The DNS response does not contain an answer to the question: hcwmw.cn. IN NS',)
18:30:23,536 [ERROR] brute:126 - Querying NS records of hcwmw.cn error
18:30:23,537 [INFOR] brute:99 - Querying A record from authoritative name server: []
18:30:23,538 [INFOR] brute:114 - Authoritative name server A record result: []
18:30:23,538 [INFOR] wildcard:159 - Collecting wildcard dns record for shannon.hcwmw.cn
18:30:23,538 [INFOR] brute:347 - Generating dictionary for shannon.hcwmw.cn
18:30:23,618 [ALERT] utils:695 - Please check whether pinglun.shannon.hcwmw.cn is correct or not
18:30:23,621 [INFOR] brute:365 - Dictionary size: 95247
18:30:23,665 [INFOR] brute:441 - Running massdns to brute subdomains

日志上传
上传oneforall.log日志文件(复杂问题建议上传)

其他补充
关于bug的其他一些补充说明

@lovelyjuice lovelyjuice added the bug Something isn't working label Jul 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants