すべてのオプション
bullseye  ] [  bullseye-backports  ] [  bookworm  ] [  trixie  ] [  sid  ]
[ ソース: dnsmap  ]

パッケージ: dnsmap (0.35-5)

dnsmap に関するリンク

Screenshot

Debian の資源:

dnsmap ソースパッケージをダウンロード:

メンテナ:

外部の資源:

類似のパッケージ:

DNS domain name brute forcing tool

dnsmap scans a domain for common subdomains using a built-in or an external wordlist (if specified using -w option). The internal wordlist has around 1000 words in English and Spanish as ns1, firewall servicios and smtp. So will be possible search for smtp.example.com inside example.com automatically. Results can be saved in CSV and human-readable format for further processing. dnsmap does NOT require root privileges to be run, and should NOT be run with such privileges for security reasons.

dnsmap was originally released back in 2006 and was inspired by the fictional story "The Thief No One Saw" by Paul Craig, which can be found in the book "Stealing the Network - How to 0wn the Box".

dnsmap is mainly meant to be used by pentesters during the information gathering/enumeration phase of infrastructure security assessments. During the enumeration stage, the security consultant would typically discover the target company's IP netblocks, domain names, phone numbers, etc.

Subdomain brute-forcing is another technique that should be used in the enumeration stage, as it's especially useful when other domain enumeration techniques such as zone transfers don't work (I rarely see zone transfers being publicly allowed these days by the way).

Fun things that can happen:

  1) Finding interesting remote access servers
     (e.g.: https:://extranet.example.com).
  2) Finding badly configured and/or unpatched servers
     (e.g.: test.example.com).
  3) Finding new domain names which will allow you to map
     non-obvious/hard-to-find netblocks of your target organization
     (registry lookups - aka whois is your friend).
  4) Sometimes you find that some bruteforced subdomains resolve to internal IP
     addresses (RFC 1918). This is great as sometimes they are real up-to-date
     "A" records which means that it is possible to enumerate internal servers
     of a target organization from the Internet by only using standard DNS
     resolving (as opposed to zone transfers for instance).
  5) Discover embedded devices configured using Dynamic DNS services
     (e.g.: IP Cameras). This method is an alternative to finding devices via
     Google hacking techniques.

This package provides two possible commands: dnsmap and dnsmap-bulk.

This program is useful for pentesters, ethical hackers and forensics experts. It also can be used for security tests.

その他の dnsmap 関連パッケージ

  • 依存
  • 推奨
  • 提案
  • enhances

dnsmap のダウンロード

すべての利用可能アーキテクチャ向けのダウンロード
アーキテクチャ パッケージサイズ インストールサイズ ファイル
amd64 27.7 kB259.0 kB [ファイル一覧]
arm64 27.2 kB255.0 kB [ファイル一覧]
armel 26.7 kB250.0 kB [ファイル一覧]
armhf 26.8 kB250.0 kB [ファイル一覧]
i386 27.6 kB258.0 kB [ファイル一覧]
mips64el 27.4 kB256.0 kB [ファイル一覧]
mipsel 27.0 kB255.0 kB [ファイル一覧]
ppc64el 28.9 kB299.0 kB [ファイル一覧]
s390x 26.0 kB255.0 kB [ファイル一覧]