{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5824","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5824/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5824/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5824/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/5824","id":100457929,"number":5824,"title":"collect dns records (a, aaaa, mx, ns, subdomains)","user":{"login":"all3g","id":7352479,"avatar_url":"https://avatars.githubusercontent.com/u/7352479?v=3","gravatar_id":"","url":"https://api.github.com/users/all3g","html_url":"https://github.com/all3g","followers_url":"https://api.github.com/users/all3g/followers","following_url":"https://api.github.com/users/all3g/following{/other_user}","gists_url":"https://api.github.com/users/all3g/gists{/gist_id}","starred_url":"https://api.github.com/users/all3g/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/all3g/subscriptions","organizations_url":"https://api.github.com/users/all3g/orgs","repos_url":"https://api.github.com/users/all3g/repos","events_url":"https://api.github.com/users/all3g/events{/privacy}","received_events_url":"https://api.github.com/users/all3g/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-08-12T03:35:47Z","updated_at":"2015-08-13T05:06:08Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/5824","html_url":"https://github.com/rapid7/metasploit-framework/pull/5824","diff_url":"https://github.com/rapid7/metasploit-framework/pull/5824.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/5824.patch"},"body":"In order to collect dns records in a simple way,  **Carlos Perez** creates [dns_bruteforce](https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dns_bruteforce.rb), [dns_cache_scraper](https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dns_cache_scraper.rb), [dns_info](https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dns_info.rb), [dns_reverse_lookup](https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dns_reverse_lookup.rb), [dns_srv_enum](https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dns_srv_enum.rb). \r\n\r\nDuring information gathering, we find an [issue](https://github.com/rapid7/metasploit-framework/issues/5816), and so [dns_record](https://github.com/all3g/metasploit-framework/blob/master/modules/auxiliary/gather/dns_records.rb) is created. Please check it. Thanks. \r\n\r\n```\r\nmsf auxiliary(dns_records) > show options \r\n\r\nModule options (auxiliary/gather/dns_records):\r\n\r\n   Name            Current Setting  Required  Description\r\n   ----            ---------------  --------  -----------\r\n   DOMAIN          google.com       yes       The target domain name\r\n   NS              8.8.8.8          no        Specify nameserver for dns queries\r\n   RETRIES         2                no        Times to retry (nameservers give us no response)\r\n   RETRY_INTERVAL  2                no        Times to wait between first and second try)\r\n   THREADS         1                no        Number of threads for subdomain bruteforce\r\n   TIMEOUT         4                no        Dns response timeout\r\n   WORDLIST                         no        Wordlist file for subdomain bruteforce\r\n\r\nmsf auxiliary(dns_records) > run\r\n\r\n[*] set dns nameserver : 8.8.8.8\r\n[*] enumerate [cHfBTlZQWqTXkJcpaIbknkqzsMVfHt.google.com] - A record \r\n[+] dns wildcard is disable\r\n[*] enumerate [google.com] - NS record \r\n[+] google.com: ns3.google.com.\r\n[+] google.com: ns2.google.com.\r\n[+] google.com: ns4.google.com.\r\n[+] google.com: ns1.google.com.\r\n[*] enumerate [google.com] - A record \r\n[+] google.com: 216.58.221.78\r\n[*] enumerate [google.com] - AAAA record \r\n[*] enumerate [google.com] - CNAME record \r\n[*] enumerate [google.com] - MX record \r\n[+] google.com: aspmx.l.google.com.\r\n[+] google.com: alt1.aspmx.l.google.com.\r\n[+] google.com: alt2.aspmx.l.google.com.\r\n[+] google.com: alt3.aspmx.l.google.com.\r\n[+] google.com: alt4.aspmx.l.google.com.\r\n[*] enumerate [google.com] - SOA record \r\n[+] google.com: ns1.google.com.\r\n[*] enumerate [google.com] - TXT record \r\n[+] google.com: v=spf1 include:_spf.google.com ~all \r\n[*] Auxiliary module execution completed\r\nmsf auxiliary(dns_records) > hosts \r\n\r\nHosts\r\n=====\r\n\r\naddress         mac  name  os_name  os_flavor  os_sp  purpose  info  comments\r\n-------         ---  ----  -------  ---------  -----  -------  ----  --------\r\n74.125.20.27               Unknown                    device         \r\n74.125.68.27               Unknown                    device         \r\n74.125.198.27              Unknown                    device         \r\n173.194.72.26              Unknown                    device         \r\n173.194.205.27             Unknown                    device         \r\n216.58.221.78              Unknown                    device         google.com\r\n216.239.32.10              Unknown                    device         \r\n216.239.34.10              Unknown                    device         \r\n216.239.36.10              Unknown                    device         \r\n216.239.38.10              Unknown                    device         \r\n\r\nmsf auxiliary(dns_records) > services \r\n\r\nServices\r\n========\r\n\r\nhost            port  proto  name  state  info\r\n----            ----  -----  ----  -----  ----\r\n74.125.20.27    25    tcp    smtp  open   \r\n74.125.68.27    25    tcp    smtp  open   \r\n74.125.198.27   25    tcp    smtp  open   \r\n173.194.72.26   25    tcp    smtp  open   \r\n173.194.205.27  25    tcp    smtp  open   \r\n216.58.221.78   53    udp    dns   open   v=spf1 include:_spf.google.com ~all \r\n216.239.32.10   53    udp    dns   open   nameserver\r\n216.239.34.10   53    udp    dns   open   nameserver\r\n216.239.36.10   53    udp    dns   open   nameserver\r\n216.239.38.10   53    udp    dns   open   nameserver\r\n```"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/130536736","html_url":"https://github.com/rapid7/metasploit-framework/pull/5824#issuecomment-130536736","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/5824","id":130536736,"user":{"login":"espreto","id":1926764,"avatar_url":"https://avatars.githubusercontent.com/u/1926764?v=3","gravatar_id":"","url":"https://api.github.com/users/espreto","html_url":"https://github.com/espreto","followers_url":"https://api.github.com/users/espreto/followers","following_url":"https://api.github.com/users/espreto/following{/other_user}","gists_url":"https://api.github.com/users/espreto/gists{/gist_id}","starred_url":"https://api.github.com/users/espreto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/espreto/subscriptions","organizations_url":"https://api.github.com/users/espreto/orgs","repos_url":"https://api.github.com/users/espreto/repos","events_url":"https://api.github.com/users/espreto/events{/privacy}","received_events_url":"https://api.github.com/users/espreto/received_events","type":"User","site_admin":false},"created_at":"2015-08-13T05:06:08Z","updated_at":"2015-08-13T05:06:08Z","body":"I recommend using [rubocop](https://github.com/rapid7/metasploit-framework/blob/master/CONTRIBUTING.md#code-contributions) for all module and see the magic happen. :)\r\n\r\nRegards,"}}