dnsreaper
subdomain takeover tool for attackers, bug bounty hunters and the blue team!
Details
Category: Vulnerabilities
Publisher: trickest-mhmdiaa
Created Date: 9/7/2022
Container: quay.io/trickest/dnsreaper:dd7fa2a-patch-2
Source URL: https://github.com/punk-security/dnsReaper
Parameters
aws
boolean
requiredCommand:
aws
- Scan multiple domains by fetching them from AWS Route53bind
boolean
requiredCommand:
bind
- Read domains from a dns BIND zone file, or path to multiplefile
boolean
requiredCommand:
file
- Read domains from a file (or folder of files), one per lineazure
boolean
requiredCommand:
azure
- Scan multiple domains by fetching them from Azure DNS servicessingle
boolean
requiredCommand:
single
- Scan a single domain by providing a domain on the commandlineverbose
boolean
Command:
-v
- Verbose outputnocolour
boolean
Command:
--nocolour
- Turns off coloured textpipeline
boolean
Command:
--pipeline
- Exit Non-Zero on detection (used to fail a pipeline)resolver
string
Command:
--resolver
- Provide a custom DNS resolver (or multiple seperated by commas)signature
string
Command:
--signature
- Only scan with this signaturecloudflare
boolean
requiredCommand:
cloudflare
- Scan multiple domains by fetching them from Cloudflaredo-api-key
string
Command:
--do-api-key
- DigitalOcean API key (the `digitalocean` input must be set to true)do-domains
string
Command:
--do-domains
- Limit the scan to these domains (comma-separated)file-input
file
Command:
--filename
- List of domains to scan (the `file` input must be set to true)out-format
string
Command:
--out-format
- Output format (csv/json)parallelism
string
Command:
--parallelism
- Number of domains to test in parallel - too high and you may see odd DNS results (default: 30)az-client-id
string
Command:
--az-client-id
- Azure client ID (the `azure` input must be set to true)az-tenant-id
string
Command:
--az-tenant-id
- Azure tenant ID (the `azure` input must be set to true)digitalocean
boolean
requiredCommand:
digitalocean
- Scan multiple domains by fetching them from Digital Oceanzonetransfer
boolean
Command:
zonetransfer
- Scan multiple domains by fetching records via DNS zone transferextra-verbose
boolean
Command:
-vv
- Extra verbose outputsingle-domain
string
Command:
--domain
- Scan this one domain (the `single` input must be set to true)bind-zone-file
file
Command:
--bind-zone-file
- Bind zone file (the `bind` input must be set to true)enable-unlikely
boolean
Command:
--enable-unlikely
- Check for more conditions, but with a high false positive rateaz-client-secret
string
Command:
--az-client-secret
- Azure client secret (the `azure` input must be set to true)cloudflare-token
string
Command:
--cloudflare-token
- Cloudflare token (the `cloudflare` input must be set to true)disable-probable
boolean
Command:
--disable-probable
- Do not check for probable conditionsaws-access-key-id
string
Command:
--aws-access-key-id
- AWS access key ID (the `aws` input must be set to true)exclude-signature
string
Command:
--exclude-signature
- Do not scan with this signatureaz-subscription-id
string
Command:
--az-subscription-id
- Azure subscription ID (the `azure` input must be set to true)zonetransfer-domain
string
Command:
--zonetransfer-domain
- Root domain to scan for (the `zonetransfer` input must be set to true)aws-access-key-secret
string
Command:
--aws-access-key-secret
- AWS access key secret (the `aws` input must be set to true)zonetransfer-nameserver
string
Command:
--zonetransfer-nameserver
- DNS server fqdn (such as ns1.domain.com) or IP address (the `zonetransfer` input must be set to true)