Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ProjectDiscovery Tools Use Hardcoded Nameservers #36

Closed
TheTechromancer opened this issue Sep 12, 2022 · 2 comments
Closed

ProjectDiscovery Tools Use Hardcoded Nameservers #36

TheTechromancer opened this issue Sep 12, 2022 · 2 comments
Assignees
Labels
bug Something isn't working

Comments

@TheTechromancer
Copy link
Collaborator

TheTechromancer commented Sep 12, 2022

Certain ProjectDiscovery tools like httpx use hardcoded DNS servers including 8.8.8.8. This behavior is not ideal. System nameservers should be used instead so that BBOT can be leveraged for internal scans, etc.

However there is currently a bug in httpx that prevents DNS from working on certain nameservers. We have opened an issue for this.

Once this bug is fixed, we need to ensure that we are passing through the system's nameservers via -r to nuclei, naabu, and httpx, etc.

@TheTechromancer TheTechromancer added the bug Something isn't working label Sep 12, 2022
@TheTechromancer
Copy link
Collaborator Author

TheTechromancer commented Sep 20, 2023

Tested this 2023-09-20, and even on the latest versions, httpx still refuses to use the system resolvers. However, the bug causing certain DNS queries to fail appears to be fixed.

I will re-add -r for custom resolvers, and any future discussions around httpx should be held in #716.

@TheTechromancer
Copy link
Collaborator Author

Fixed in #749.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants