nosmo / fess_up Goto Github PK

View Code? Open in Web Editor NEW

4.0 4.0 2.0 25 KB

Unintelligent DNS record guesser in Python

Python 100.00%

fess_up's People

Contributors

Stargazers

Watchers

Forkers

donnchac equalitie

fess_up's Issues

Missing install_requires=['pyyaml']

Steps to reproduce:

$ virtualenv /tmp/sandbox
$ /tmp/sandbox/bin/pip install fess_up
$ /tmp/sandbox/bin/fess_up.py
Traceback (most recent call last):
  File "/tmp/sandbox/bin/fess_up.py", line 20, in <module>
    import yaml
ImportError: No module named yaml

Don't write A records for what are actually CNAMEs

NameError: name 'codes' is not defined

When running fess-up.py

python fess-up.py   
Traceback (most recent call last):
  File "./fess-up.py", line 29, in <module>
    import dnsnames
  File "/home/l/documents/fess-up/src/dnsnames/__init__.py", line 15, in <module>
    dnsnames += set(codes)
NameError: name 'codes' is not defined

Wordlist globbling returns incorrect results

The path that is used to locate *txt for dnsnames is incorrect and will frequently glob the wrong thing.

Search for common TXT records

This is an edge case and not part of the common scanning flow but fess-up needs to check for records like _domainkey

Get MX records before wildcard check

The nature of wildcard records messes up our scan for the most part, but it doesn't mean that we can't get TXT and MX records for @. Make sure these are queried before DomainScans return.

make dnsname_list available outside of fess_up.py

I need to pass in the list
fess_up.DomainScan("yahoo.com", ['www', 'mail', 'wiki', 'search', 'blog' ...
manually if I use this as a module, since I don't actually run fess_up.py.

Script name conflicts with package name

Steps to reproduce:

$ virtualenv /tmp/sandbox
$ /tmp/sandbox/bin/pip install fess_up pyyaml
$ /tmp/sandbox/bin/fess_up.py
Traceback (most recent call last):
  File "/tmp/sandbox/bin/fess_up.py", line 23, in <module>
    from fess_up import dnsnames, DomainScan
  File "/tmp/sandbox/bin/fess_up.py", line 23, in <module>
    from fess_up import dnsnames, DomainScan
ImportError: cannot import name dnsnames

This happens because Python adds the directory containing the script to the beginning of sys.path, and then 'from fess_up import ...' finds fess_up.py in the script directory instead of finding fess_up/__init__.py in the site-packages directory.

Suggested fix: rename the script to not have the .py extension.

dns.name.EmptyLabel

 % python fess-up.py -c ../conf/fess-up.yaml google.ca
google.ca
  File "fess-up.py", line 159, in <module>
    main(args.domains, mysql_config)
  File "fess-up.py", line 131, in main
    domain_scanner.runScan()
  File "fess-up.py", line 63, in runScan
    for subdomain, record in self._scan("A").iteritems():
  File "fess-up.py", line 87, in _scan
    answers = dns.resolver.query("%s" % (query_str), record_type)
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 770, in query
    raise_on_no_answer)
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 602, in query
    qname = dns.name.from_text(qname, None)
  File "/usr/lib/python2.7/dist-packages/dns/name.py", line 637, in from_text
    raise EmptyLabel
dns.name.EmptyLabel

Seems to work OK if I add

            try:
                answers = dns.resolver.query("%s" % (query_str), record_type)
            except (dns.resolver.NXDOMAIN, dns.resolver.NoAnswer, dns.name.EmptyLabel):
                continue

Traceback (most recent call last):
<!-- SNIP -->
  File "/usr/local/lib/python2.7/dist-packages/fess_up/domainscan.py",
line 36, in runScan
    for subdomain, record in self._scan("NS").iteritems():
  File "/usr/local/lib/python2.7/dist-packages/fess_up/domainscan.py",
line 64, in _scan
    answers = self.resolver.query("%s" % (query_str), record_type)
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 826, in
query
    timeout = self._compute_timeout(start)
  File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 739, in
_compute_timeout
    raise Timeout
Timeout