infosec-au / altdns Goto Github PK

Hi,

just a little note that the last line sort binary (default on unix) breaks the requirements.txt for pip.

$> pip install -r requirements.txt 
Invalid requirement: 'sort binary (default on unix)'
Traceback (most recent call last):
  File "/backup/gehaxelt/hacking/tools/altdns/venv/lib/python2.7/site-packages/pip/req/req_install.py", line 78, in __init__
    req = Requirement(req)
  File "/backup/gehaxelt/hacking/tools/altdns/venv/lib/python2.7/site-packages/pip/_vendor/packaging/requirements.py", line 96, in __init__
    requirement_string[e.loc:e.loc + 8]))
InvalidRequirement: Invalid requirement, parse error at "u'binary ('"

Maybe you can move that line into the README.txt ?

Kind regards,
gehaxelt

Would be cool to add a flag instead of -d flag, and allowing the user to add a custom DNS resolver list.

When running in Python 3, there is an error message:
File "/usr/local/lib/python3.8/site-packages/altdns/main.py", line 10, in
from Queue import Queue as Queue
ModuleNotFoundError: No module named 'Queue'

That is because in Python 3 some changes happened.

Correct statement in usr/local/lib/python3.8/site-packages/altdns/main.py:
from queue import Queue as queue

also change, right after main():
q = queue()

Hi
I used this command
altdns -i httpx_.net.io.com.de -o data_output -w ../../wordlist/altdns_wordlist.txt -r -s results_output.txt

and this is my output in results_output.txt file

└─$ cat results_output.txt 
2024-03-28 18:54:58 (3.62 MB/s) - ‘words.txt’ saved [1352/1352]-logistics-prophet-api.dlvryk8sp.ext.aws.zooplus.io:18.196.236.19
logistics-prophet-api.Saving to: ‘words.txt’.dlvryk8sp.ext.aws.zooplus.io:3.69.161.33
2024-03-28 18:54:58 (3.62 MB/s) - ‘words.txt’ saved [1352/1352]shop-header-prod.catlgk8sp.ext.aws.zooplus.io:3.66.53.218
logistics-prophet-api-dev.public.zooplus.net:logistics-prophet-api.dlvryk8sd.ext.aws.zooplus.io.
shop-header-prod.--2024-03-28 18:54:58--  https://raw.githubusercontent.com/infosec-au/altdns/master/words.txt.shopk8sp.ext.aws.zooplus.io:3.64.114.28
Length: 1352 (1.3K) [text/plain]article-master-data-to-fc-api.mdmk8sd.ext.aws.zooplus.io:3.123.55.105

why its not just giving me resolved subdomains properly

hi,
I am using a wordlist like 130 Mb, I know it is big but how to limit the output file created by -o flag , because I get an output file like 50 gig , is there a way to stop altdns when the output is X gigs ?

altdns raises the following error when executed as non-root user:

No handlers could be found for logger "tldextract"

When a logger is provided, tldextract reports the following error:

WARNING:tldextract:unable to cache TLDs in file /usr/local/lib/python2.7/dist-packages/tldextract/.tld_set: [Errno 13] Permission denied: '/usr/local/lib/python2.7/dist-packages/tldextract/.tld_set'

This issue doesn't change the operation of altdns at all. For more info, refer to john-kurkowski/tldextract#9

A patch is forthcoming.

when install tools and dont display altdns.py i cant find it and when use commond dont work

I noticed this was missing license, is it possible to add one?

Traceback (most recent call last):
File "/usr/local/bin/altdns", line 33, in
sys.exit(load_entry_point('py-altdns==1.0.2', 'console_scripts', 'altdns')())
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/bin/altdns", line 25, in importlib_load_entry_point
return next(matches).load()
^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/importlib/metadata/init.py", line 202, in load
module = import_module(match.group('module'))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/importlib/init.py", line 126, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "", line 1204, in _gcd_import
File "", line 1176, in _find_and_load
File "", line 1147, in _find_and_load_unlocked
File "", line 690, in _load_unlocked
File "", line 940, in exec_module
File "", line 241, in _call_with_frames_removed
File "/usr/local/lib/python3.11/dist-packages/altdns/main.py", line 10, in
from Queue import Queue as Queue
ModuleNotFoundError: No module named 'Queue'

We're trying to chain multiple tools together: subfinder, altdns, and massdns like below. However I can't seem to get altdns to accept input from stdin and output to stdout.

It would be great if altdns supported this. With a big wordlist and couple hundred domains, the output generated by altdns for us was more than 45GB. It's not feasible for us to store this, since we're automating this process with containers. It would also make using altdns with other tools much easier!

Wanted Command:

subfinder -d <target> | altdns -w all.txt | massdns -r resolvers.txt -o J -q 

root@bbmachine:~/recon/bugbounty# altdns
/usr/local/lib/python3.8/dist-packages/py_altdns-1.0.0-py3.8.egg/altdns/main.py:45: SyntaxWarning: "is not" with a literal. Did you mean "!="?

Consider adding Hudson Rock's complimentary data to receive additional URLs associated with a specific domain.
Data was retrieved from infected computers with the Infostealer malware and contains URLs that usually cannot be found conventionally.

Domain sample: https://cavalier.hudsonrock.com/api/json/v2/osint-tools/urls-by-domain?domain=tesla.com

Thank you.

Hi,

I had to install the dnspython package in addition to the dependencies listed in requirements.txt.

You might want to add it to the requirements.txt.

Regards,
gehaxelt

I'm running this on an old laptop and am getting the following error

Traceback (most recent call last):
File "./altdns.py", line 158, in
t.start()
File "/usr/lib/python2.7/threading.py", line 736, in start
_start_new_thread(self.__bootstrap, ())
thread.error: can't start new thread
Exception in thread Thread-378:
Traceback (most recent call last):
File "/usr/lib/python2.7/threading.py", line 801, in __bootstrap_inner
self.run()
File "/usr/lib/python2.7/threading.py", line 754, in run
self.__target(_self.__args, *_self.__kwargs)
File "./altdns.py", line 115, in get_cname
progress += 1
TypeError: unsupported operand type(s) for +=: 'NoneType' and 'int'

No module named 'queue' or No module named 'Queue'

I got this exceprion when use python altdns.py

Traceback (most recent call last):
File "altdns.py", line 11, in
import Queue as Queue
ImportError: No module named 'Queue'

so .. I think
from Queue import Queue as Queue
should be
from multiprocessing import Queue

Hi,

After installing the tool, i cant able to run the process. It shows altdns command not found

Steps done:

1. Install pip install py-altdns
2. Clone the repository
3. Run the command altdns -i domain.txt -o data_output -w words.txt -r -s results_output.txt

Following is the list of warnings shown during the step1.

Installing collected packages: dnspython, termcolor, idna, certifi, chardet, urllib3, requests, requests-file, tldextract, py-altdns
The script chardetect is installed in '/home/bb/.local/bin' which is not on PATH.
Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
The script tldextract is installed in '/home/bb/.local/bin' which is not on PATH.
Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
The script altdns is installed in '/home/bb/.local/bin' which is not on PATH.
Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
Successfully installed certifi-2020.6.20 chardet-3.0.4 dnspython-1.16.0 idna-2.10 py-altdns-1.0.0 requests-2.24.0 requests-file-1.5.1 termcolor-1.1.0 tldextract-2.2.3 urllib3-1.25.10

There is no altdns.py file. any solution for this

Hi,

when using altdns with the -r switch and scanning a wildcard domain you'll get a lot of invalid results.

It would be nice to have some kind of wildcard dns detection to skip such domains.

Regards,
gehaxelt

Traceback (most recent call last):
File "/usr/local/bin/altdns", line 11, in
load_entry_point('py-altdns==1.0.0', 'console_scripts', 'altdns')()
File "/usr/lib/python3/dist-packages/pkg_resources/init.py", line 490, in load_entry_point
return get_distribution(dist).load_entry_point(group, name)
File "/usr/lib/python3/dist-packages/pkg_resources/init.py", line 2854, in load_entry_point
return ep.load()
File "/usr/lib/python3/dist-packages/pkg_resources/init.py", line 2445, in load
return self.resolve()
File "/usr/lib/python3/dist-packages/pkg_resources/init.py", line 2451, in resolve
module = import(self.module_name, fromlist=['name'], level=0)
File "/usr/local/lib/python3.8/dist-packages/altdns/main.py", line 10, in
from Queue import Queue as Queue
ModuleNotFoundError: No module named 'Queue'

python3.11.2
debian 12

python3 altdns -i known.txt -o data_output -w www.txt -r -s results.txt

Traceback (most recent call last):
  File "/usr/lib/python3.11/threading.py", line 1038, in _bootstrap_inner
    self.run()
  File "/usr/lib/python3.11/threading.py", line 975, in run
    self._target(*self._args, **self._kwargs)
  File "/usr/local/lib/python3.11/dist-packages/altdns/__main__.py", line 170, in get_cname
    resolver = dns.resolver.Resolver()
               ^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/dns/resolver.py", line 944, in __init__
    self.read_resolv_conf(filename)
  File "/usr/local/lib/python3.11/dist-packages/dns/resolver.py", line 1041, in read_resolv_conf
    self.nameservers = nameservers
    ^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/dns/resolver.py", line 1232, in nameservers
^C    self._enrich_nameservers(nameservers, self.nameserver_ports, self.port)
  File "/usr/local/lib/python3.11/dist-packages/dns/resolver.py", line 1199, in _enrich_nameservers
Traceback (most recent call last):
  File "/usr/local/bin/altdns", line 8, in <module>
    raise ValueError(
ValueError: nameserver no is not a dns.nameserver.Nameserver instance or text form, IP address, nor a valid https URL
    sys.exit(main())
             ^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/altdns/__main__.py", line 338, in main

So i was running altdns , but for some reason i went out of memory and the process got killed automatically , Is there a way to resume the execution from the point it got stopped ?
like in httpx probe , we have a resume.cfg , a config file to resume execution ??