After working on dnsmap for a few months whenever time allowed, I decided there were enough additional goodies to make version 0.30 a new public release.

Let me just say that a lot of the bugs that have been fixed, and features that have been added to this version would not be possible without the feedback from great folks such as Borys Lacki (www.bothunters.pl), Philipp Winter (7c0.org) and meathive (kinqpinz.info).

Thanks guys, your feedback was highly valuable to me.

new features

Anyways, the following are some of the new features included:

• IPv6 support
• Makefile included
• delay option (-d) added. This is useful in cases where dnsmap is killing your bandwidth
• ignore IPs option (-i) added. This allows ignoring user-supplied IPs from the results. Useful for domains which cause dnsmap to produce false positives
• changes made to make dnsmap compatible with OpenDNS
• disclosure of internal IP addresses (RFC 1918) are reported
• updated built-in wordlist
• included a standalone three-letter acronym (TLA) subdomains wordlist
• domains susceptible to “same site” scripting are reported
• completion time is now displayed to the user
• mechanism to attempt to bruteforce wildcard-enabled domains
• unique filename containing timestamp is now created when no specific output filename is supplied by user
• various minor bugs fixed

For those who have never used dnsmap, dnsmap is a command line tool originally released in 2006 which helps discover target subdomains and IP ranges during the initial stages of an infrastructure pentest. dnsmap is a passive(ish) discovery tool meant to be used before an actual active attack. It’s an alternative to other discovery techniques such as whois lookups, scanning large IP ranges, etc … Run dnsmap and you should be able spot netblocks of a target organization in a relatively short period of time.

dnsmap is open source and is known to work on Linux, FreeBSD and Windows using Cygwin, although it has mostly been tested on Linux.

The major drawback is lack of multi-threading support, which I’m hoping will be included in the next public release. Life is busy these days, but I’ll try to spend some time on this project when time allows and inspiration is available!

—
gnucitizen information security gigs part of the cutting-edge network:

• No active items found!
• GNUCITIZEN NETWORK

—
recent posts from the gnucitizen cutting-edge network:

Exit Through the Gift Shop
Jerry Rice on Success
Time Blocking
0.5 is up for grabs
Websecurify 0.5RC1 Is Available for Download

View full post on GNUCITIZEN

• Trends and Dynamics of the Endpoint Security Industry
  This paper examines trends and dynamics of the endpoint security industry, and evaluates the performance of market leaders such as Symantec in the context of these factors. View full post on Lenny ...
• VLC 1.1.7 fixes critical .mkv vulnerability
  The VLC developers are really fast! Only two days after a new security vulnerability in the .mkv processing routines became public, a fixed version of the player is available for download. VLC 1.1.7 h...
• Rogue security software video tutorials
  This is really hilarious. It seems that the rogue software gang decided to improve OOBE of their software! They now have video tutorials at YouTube, which tell how to run online malware-scan and how t...
• Testimonials: Rootkit Analytics Tools
  Rootkit Analytics has come up with a “Testimonials” section. This can be seen in our web portal, www.RootkitAnalytics.com: [Click on the above image to enlarge view] We welcome all our use...
• PhacePhish: New Facebook Attack gives a One-Two Punch
  Tonight I had a message from one of my Facebook friends who was concerned that someone may have hacked her Facebook account. She was worried that she might get a virus by looking at the links they ha...
• Facebook message hides malware
  A message that claims to be from Facebook lures users into running a malicious attachment: “You have got a personal message on Facebook from your friend. To read it please check the attachment&...
• “Here you have” worm
  An email worm that appears to be a decade-old throwback was spotted yesterday and widely reported.The subject line on the email was “Here you have” or "Just For you.”The body of the email was:“Hello:“...
• Blackhat Vegas 2010
  Blackhat Vegas, one of the largest technical and most anticipated security conferences of the year, is just around the corner, and we wanted to let everyone know what talks we'll be givi...
• Facebook Caught Up in Apps Privacy Breach
  Many Facebook applications share users' personal information with advertising networks and other Internet-tracking companies, according to a Wall Street Journal report. View full post on PC...
• AVG Internet Security 9.0 – FREE DOWNLOAD
  Download Here - documentariesonline.net AVG Internet Security's multiple layers of protection mean you don't have to worry about identity theft, spam or viruses. It'll ...