Leverage Many Recursive DNS Servers

Designed to support DNS brute-forcing with minimal system resources:

• Easy to send a large number of queries concurrently
• Hundreds of DNS nameservers can easily be leveraged
• A minimal number of goroutines are employed by the package
• Provides features like DNS wildcard detection and NSEC traversal

Installation

go get -v -u github.com/owasp-amass/resolve@master

Usage

qps := 15
var nameservers = []string{
    "8.8.8.8",        // Google
    "1.1.1.1",        // Cloudflare
    "9.9.9.9",        // Quad9
    "208.67.222.222", // Cisco OpenDNS
    "84.200.69.80",   // DNS.WATCH
    "64.6.64.6",      // Neustar DNS
    "8.26.56.26",     // Comodo Secure DNS
    "205.171.3.65",   // Level3
    "134.195.4.2",    // OpenNIC
    "185.228.168.9",  // CleanBrowsing
    "76.76.19.19",    // Alternate DNS
    "37.235.1.177",   // FreeDNS
    "77.88.8.1",      // Yandex.DNS
    "94.140.14.140",  // AdGuard
    "38.132.106.139", // CyberGhost
    "74.82.42.42",    // Hurricane Electric
    "76.76.2.0",      // ControlD
}
r := resolve.NewResolvers()
_ = r.AddResolvers(qps, nameservers...)
defer r.Stop()

ctx, cancel := context.WithTimeout(context.Background(), 30 * time.Second)
defer cancel()

ch := make(chan *dns.Msg, 100)
go func() {
    for _, name := range names {
        r.Query(ctx, resolve.QueryMsg(name, 1), ch)
    }
}()

for {
    select {
    case <-ctx.Done():
        return
    case resp := <-ch:
        if resp.Rcode == dns.RcodeSuccess && len(resp.Answer) > 0 {
            ans := ExtractAnswers(resp)
            domain, err := publicsuffix.EffectiveTLDPlusOne(ans[0].Name)

            if err == nil && !r.WildcardDetected(ctx, resp, domain) {
                fmt.Printf("%s resolved to %s\n", ans[0].Name, ans[0].Data)
            }
        }
    }
}

Licensing

This program is free software: you can redistribute it and/or modify it under the terms of the Apache license.