You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Processing wildcard failed, resulting in too long a time
mogujie.com has wirdcard domain,like aaaaa.mogujie.com. bbbbb.mogujie.com
when curl aaaaa.mogujie.com, We can see it return '店铺不存在'. we can filter wildcard domain by this features。
The wildcard is being detected correctly. The issue appears to be that the nsec module is getting stuck in a loop:
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
[DBUG] Results for \000.qihe.mogujie.com with kwargs={'type': 'NSEC'}: {'\\000.qihe.mogujie.com'}
[DBUG] Resolving \000.qihe.mogujie.com with kwargs={'rdtype': 'NSEC'}
Describe the bug
Processing wildcard failed, resulting in too long a time
mogujie.com has wirdcard domain,like aaaaa.mogujie.com. bbbbb.mogujie.com
when curl aaaaa.mogujie.com, We can see it return '店铺不存在'. we can filter wildcard domain by this features。
BBOT Command
docker run -it blacklanternsecurity/bbot:stable -t mogujie.com -f subdomain-enum -c modules.massdns.max_resolvers=3000
BBOT Config
default
Screenshots
after 24 hours program is still running. execute ctrl+c and no result found .
it seems something wrong when handle wildcard.
The text was updated successfully, but these errors were encountered: