celerystalk icon indicating copy to clipboard operation
celerystalk copied to clipboard

Importing domains using -D is not setting them in scope

Open cwaazywabbit opened this issue 4 years ago • 1 comments

I thought that the -D parameter is supposed to import domains to scope, but it's importing them to DB without setting the flag In Scope as seen here:

./celerystalk import -D /root/x/scope.txt

celerystalk  -  An asynchronous network enumeration/vulnerability scanner 
    v1.3.1      Run all your tools against all your hosts (IPs/virtual hosts/subdomains)
                by @sethsec
                Build: 245

[+] Found subdomain (out of scope):             srv-sql-p4.xx.xyz.de
[+] Found subdomain (out of scope):             srv-fs-p04.xx.xyz.de
[+] Found subdomain (out of scope):             xx-develop.xx.xyz.de
[+] Found subdomain (out of scope):             srv-xx-ea2.xx.xyz.de

[!] There are no in scope hosts in the DB
./celerystalk db hosts

celerystalk  -  An asynchronous network enumeration/vulnerability scanner 
    v1.3.1      Run all your tools against all your hosts (IPs/virtual hosts/subdomains)
                by @sethsec
                Build: 245

[+] Showing hosts for the [prima] workspace

+---------------+--------------------------+----------+-----------------------+-----------+
| IP            | Vhost                    | In Scope | Explicit Out of Scope | Submitted |
+---------------+--------------------------+----------+-----------------------+-----------+
| 10.35.100.103 | srv-xx-ea2.xx.xyz.de      |    0     |           0           |     0     |
| 10.35.100.202 | srv-sql-p4.xx.xyz.de      |    0     |           0           |     0     |
| 10.35.100.214 | srv-fs-p04.xx.xyz.de      |    0     |           0           |     0     |
| 10.35.100.94  | xx-develop.xx.xyz.de |    0     |           0           |     0     |
+---------------+--------------------------+----------+-----------------------+-----------+

Am I missing something?

cwaazywabbit avatar Mar 30 '20 11:03 cwaazywabbit

Nevermind, I have just RTFM.. but I am not seeing the logic of importing IPs first, than domains. The documentation says:

celerystalk determines whether each subdomain is in scope by resolving the IP and looking for IP in the DB. If there is a match, the domain is marked as in scope and will be scanned.

cwaazywabbit avatar Mar 30 '20 12:03 cwaazywabbit