hakluke/hakrevdns

Stars
1,404
Rank 33,499 (Top 0.7 %)
Language
Go
License
MIT License
Created almost 5 years ago
Updated 4 months ago

hakluke/hakrevdns

hakluke

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Small, fast tool for performing reverse DNS lookups en masse.

hakrevdns

Small, fast, simple tool for performing reverse DNS lookups en masse.

You feed it IP addresses, it returns hostnames.

This can be a useful way of finding domains and subdomains belonging to a company from their IP addresses.

Installation

go install github.com/hakluke/hakrevdns@latest

Usage

The most basic usage is to simply pipe a list of IP addresses into the tool, for example:

hakluke~$ prips 173.0.84.0/24 | hakrevdns 
173.0.84.110	he.paypal.com.
173.0.84.109	twofasapi.paypal.com.
173.0.84.114	www-carrier.paypal.com.
173.0.84.77	twofasapi.paypal.com.
173.0.84.102	pointofsale.paypal.com.
173.0.84.104	slc-a-origin-pointofsale.paypal.com.
173.0.84.111	smsapi.paypal.com.
173.0.84.203	m.paypal.com.
173.0.84.105	prm.paypal.com.
173.0.84.113	mpltapi.paypal.com.
173.0.84.8	ipnpb.paypal.com.
173.0.84.2	active-www.paypal.com.
173.0.84.4	securepayments.paypal.com.
...

Parameters

hakluke~$ hakrevdns -h
Usage:
  hakrevdns [OPTIONS]

Application Options:
  -t, --threads=           Number of threads (too many may get you banned, too few will be slow)
  -r, --resolver=          IP of the DNS resolver to use for lookups
  -P, --protocol=[tcp|udp] Protocol to use for lookups (default: udp)
  -p, --port=              Port to bother the specified DNS resolver on (default: 53)
  -d, --domain             Output only domains

Help Options:
  -h, --help               Show this help message

If you want to use a resolver not specified by your OS, say: 1.1.1.1, try this:

hakluke~$ echo "173.0.84.110" | hakrevdns -r 1.1.1.1
173.0.84.110    he.paypal.com.

If you wish to obtain only a list of domains without IP addresses, you can use -d:

$ echo "173.0.84.110" | hakrevdns -d

This tool is designed to be easily piped into other tools, for example:

$ echo "173.0.84.110" | hakrevdns -d | httprobe

Contributors

hakluke wrote the tool
alphakilo added the option to use custom resolvers
SaveBreach added the -d flag and cleaned up the code

how-to-exit-vim

Below are some simple methods for exiting vim.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

haktrails

Golang client for querying SecurityTrails API data

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

hakcheckurl

Takes a list of URLs and returns their HTTP response codes

bug-bounty-standards

A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

hakscale

Distribute ordinary bash commands over many systems

haktldextract

Extract domains/subdomains from URLs en masse

hakfindinternaldomains

Feed it a list of subdomains, it will resolve them and tell you which ones are internal

hakcron

Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)

hakq

A basic golang server/client for distributing tasks over multiple systems.

hakrevshell

hakcertstream

Basic implementation of certstream to print new subdomains and domains

hakstore

hakluke

hakcsp

Return domains in CSP headers in http response

hakaxfr

Attempt zone transfers on domains

hakjoke

Gets joke from icanhazdadjoke.com, prints it

haksecuritytxt

Takes a list of domains as the input, checks if they have a security.txt, outputs the results.

helloworlds

hello world in different languages

----svg-onload-alert---

jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e

XSS

hakawshostnames

Generate a list of all AWS hostnames

hakurlencode

(en|de)code urls from the CLI

gzipsplit

split lines of text into multiple gzip files

hakgzsplit

Split text files into gzip files with x lines

vulnerable-code-examples

An unorganized batch of vulnerable code examples for use in my blogs, training, etc.

wordlesolver

Little python script + dictionary to help solve Wordle puzzles

FakeKoala

diodb-api