dnsx icon indicating copy to clipboard operation
dnsx copied to clipboard

Piped domain does not work with wordlist brute-forcing

Open forgedhallpass opened this issue 3 years ago • 1 comments

image

forgedhallpass avatar Sep 06 '22 12:09 forgedhallpass

@forgedhallpass the working example for above is echo projectdiscovery.io | dnsx -w nuclei,www -d -

dnsx support stdin input for all the input flags (list,domain,wordlist), as default l flag is supported for stdin, other input flag can be used by specifying the flag input with dash (-).

as default stdin input used for -l option and not as domain (-d) which is required input for wordlist bruteforce.

ehsandeep avatar Sep 06 '22 19:09 ehsandeep

Closing as not planned, workaround - https://github.com/projectdiscovery/dnsx/issues/234#issuecomment-1238541218

ehsandeep avatar Jan 25 '23 08:01 ehsandeep

@forgedhallpass the working example for above is echo projectdiscovery.io | dnsx -w nuclei,www -d -

dnsx support stdin input for all the input flags (list,domain,wordlist), as default l flag is supported for stdin, other input flag can be used by specifying the flag input with dash (-).

as default stdin input used for -l option and not as domain (-d) which is required input for wordlist bruteforce.

IMO it is very counter-intuitive and redundant to require -d - when you've already passed in a wordlist (which only makes sense for brute-forcing) and a target. Furthermore the -d and -l flags should be merged, because it suggests that you can start two actions at once and the results will be merged, which is not true at the moment (see below), nor is uniform with the other PD tools. Just my 2c.

See:

echo example.com | dnsx -d projectdiscovery.io -w www,blog -silent
    blog.projectdiscovery.io
    www.projectdiscovery.io

dnsx -l input.txt -d projectdiscovery.io -w www -silent
    [FTL] list(l) flag can not be used domain(d) or wordlist(w) flag

forgedhallpass avatar Jan 25 '23 11:01 forgedhallpass