hakluke / hakrevdns Goto Github PK

View Code? Open in Web Editor NEW

1.4K 19.0 152.0 30 KB

Small, fast tool for performing reverse DNS lookups en masse.

License: MIT License

Go 100.00%

hakrevdns's Introduction

hakrevdns

Small, fast, simple tool for performing reverse DNS lookups en masse.

You feed it IP addresses, it returns hostnames.

This can be a useful way of finding domains and subdomains belonging to a company from their IP addresses.

Installation

go install github.com/hakluke/hakrevdns@latest

Usage

The most basic usage is to simply pipe a list of IP addresses into the tool, for example:

hakluke~$ prips 173.0.84.0/24 | hakrevdns 
173.0.84.110	he.paypal.com.
173.0.84.109	twofasapi.paypal.com.
173.0.84.114	www-carrier.paypal.com.
173.0.84.77	twofasapi.paypal.com.
173.0.84.102	pointofsale.paypal.com.
173.0.84.104	slc-a-origin-pointofsale.paypal.com.
173.0.84.111	smsapi.paypal.com.
173.0.84.203	m.paypal.com.
173.0.84.105	prm.paypal.com.
173.0.84.113	mpltapi.paypal.com.
173.0.84.8	ipnpb.paypal.com.
173.0.84.2	active-www.paypal.com.
173.0.84.4	securepayments.paypal.com.
...

Parameters

hakluke~$ hakrevdns -h
Usage:
  hakrevdns [OPTIONS]

Application Options:
  -t, --threads=           Number of threads (too many may get you banned, too few will be slow)
  -r, --resolver=          IP of the DNS resolver to use for lookups
  -P, --protocol=[tcp|udp] Protocol to use for lookups (default: udp)
  -p, --port=              Port to bother the specified DNS resolver on (default: 53)
  -d, --domain             Output only domains

Help Options:
  -h, --help               Show this help message

If you want to use a resolver not specified by your OS, say: 1.1.1.1, try this:

hakluke~$ echo "173.0.84.110" | hakrevdns -r 1.1.1.1
173.0.84.110    he.paypal.com.

If you wish to obtain only a list of domains without IP addresses, you can use -d:

$ echo "173.0.84.110" | hakrevdns -d

This tool is designed to be easily piped into other tools, for example:

$ echo "173.0.84.110" | hakrevdns -d | httprobe

Contributors

hakluke wrote the tool
alphakilo added the option to use custom resolvers
SaveBreach added the -d flag and cleaned up the code

hakrevdns's People

Contributors

Stargazers

Watchers

Forkers

cephurs gavz slooppe silentsoul04 003random c002 bbhunter sgnls fo0nikens prayog-lab marcosnk rahmiy alphakilo developer-box elamaran619 pentest-tools dot-sean mentsh 5l1v3r1 backwardn hackerpain shahid1996 lordokeson storenth 3334yogendra samoo-7 bonedaddy tamjid0x01 acealchemycyberblaze mmg1 g-llyria pczajkowski sanjogpandasp drkeinelust polling-repo-continua arukaminado wisdark 0xflotus affilares th3cyb3rc0p p1ngfl0yd ktzgraph yunginnanet ankushbhaal tester-byte noobsdt harish4948 hartl3y94 faisalrathore fengjixuchui lalkaltest actorexpose devildog13 madusec okaayfine gprime31 shourya119 ofjaaah fdlucifer munstar0s bitmaskit codehunte nhl0010 dvntaudio harris2015 itsbriany albonycal dirtybull tommalvoriddle azrotronik jabdy86 bugbountydude nullfuzz-pentest cberto fostane sylviagaytaneh2021 runningoutoftimeu rakhithjk daveyshmave atimorin xmardus rezaduty 0xbool userlearning2019 essoojay pcoder7 0xy4q sagardhakal-photon teddymwai the-moisrex ronin-dojo m4nib mayankarya837 cturan mohameddiv tech1media professorabhay unleashedmen r4monsys csesardic

hakrevdns's Issues

Homebrew formula

Is it possible to create a Homebrew formula to make installation on Mac easier?

add a option to resolve with a large number of resolvers

-r resolvers.txt

error when run

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x4e8cc6]

goroutine 132 [running]:
net.(*Resolver).lookupAddr(0x0, 0x590ec0, 0xc42001a088, 0xc42001aad0, 0xc, 0x4297e9, 0x8, 0xc420058080, 0x0, 0xc4200eeef0)
        /usr/lib/go-1.10/src/net/lookup_unix.go:189 +0x26
net.(*Resolver).LookupAddr(0x0, 0x590ec0, 0xc42001a088, 0xc42001aad0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0)
        /usr/lib/go-1.10/src/net/lookup.go:390 +0x5a
main.worker(0xc42001aad0, 0xc, 0xc42001a2e0, 0xc420064120)
        /root/go/src/github.com/hakluke/hakrevdns/main.go:35 +0xca
created by main.main
        /root/go/src/github.com/hakluke/hakrevdns/main.go:57 +0x17e

hey,
is there a way that the last "period" when checking can be omitted in the results? currently using sed to remove it.
3.0.84.109 twofasapi.paypal.com.
173.0.84.107 cupapiserv.paypal.com.
173.0.84.113 mpltapi.paypal.com.
173.0.84.116 cld-edge-origin-api.paypal.com.
173.0.84.114 www-carrier.paypal.com.
173.0.84.117 api-aa-3t.paypal.com.
173.0.84.120 trinityadminauth.paypal.com.
173.0.84.115 phy-edge-origin-api.paypal.com.
173.0.84.119 cors.api.paypal.com.
173.0.84.118 appmanagement.paypal.com.
173.0.84.122 proxo.paypal.com.
173.0.84.121 ca-webapi-vip-

thanks
ipk1

hakluke / hakrevdns Goto Github PK

hakrevdns's Introduction

hakrevdns

Installation

Usage

Parameters

Contributors

hakrevdns's People

Contributors

Stargazers

Watchers

Forkers

hakrevdns's Issues

Recommend Projects

Recommend Topics

Recommend Org