eldraco / domain_analyzer Goto Github PK

Thanks for the analyzer. (-:

I download the files, unzip them and open the folder in terminal. Then I did the following command
sudo find . -name \*.py -exec cp {} /usr/local/bin \;
Works!

Hi there,

There's an option to output the data in JSON format to a file or directly to stdout?

Thanks in advance.

• VirusTotal
• Passive Total
• Threat Crowd

i am using ubuntu os and this command is not working domain_analyzer.py -d .gov -k 10 -b

Fresh install.
Ubuntu 16.04.3
Python 2.7.12

`user@user ~/D/domain_analyzer-master> sudo ./domain_analyzer.py -d website.net -o -e
+----------------------------------------------------------------------+

A lot of stuff

--------------End Summary --------------

<type 'exceptions.OSError'>
(2, 'No such file or directory')
[Errno 2] No such file or directory
x = 2
y = No such file or directory
`

383 instances of Python 3.x incompatible use of print operator

Fixing Python 3.x incompatible use of print operator issues

The 2to3 utility that ships with Python can automatically fix all print statements so that they are compatible with both Python 2 and Python 3.

At the root of your project, run 2to3 -f print . to see all the lines that need to be changed and then run 2to3 -f print -w . to actually write (-w) the changes into the files.

https://docs.python.org/2/library/2to3.html

┌──(kali ㉿kali)-[~/Tools/ domain analyzer]
└─$ ./domain_analyzer.py -d google.com
File "/home/user/Tools/domain analyzer/./domain_analyzer.py", line 262
print "+----------------------------------------------------------------------+"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Syntax Error: Missing parentheses in call to 'print'. Did you mean print(.. .)?

when I check the doamin_analyzer.py source code. all the print statement does not have open and close parenthesis.
I tried all the methods even run this like,
python3 doamin_analyzer.py -d google.com
but, it showing the same error !!!

Example:
sudo python2.7 ./domain_analyzer.py -d unlp.edu.ar -o

The open folders results for debian.unlp.edu.ar are printed for all the hosts.

Hi Sebastian,

thanks for your great tool. One issue: It looks like it uses IPv4 only. Some of my own name servers (which I tested with your tool) also provide IPv6. Hence it would be great if your checks (ping, nmap, zone transfer, ...) would also run against the IPv6 addresses and not only to the v4 ones.

Cheers,
Johannes

That would be much more convenient.

It looks like python-dnspython can't get resolved when trying to run this on macOSX. Is this script limited to ubuntu flavored linux distributions? Or is it any-linux? or any-unix?

Just downloaded and ran domain_analyzer, playing around with different features, so far the info is great! Thanks for the dev work! Host is Kali Linux.

I did get the following error a couple minutes through run time of the following command:
root@--- # ./domain_analyzer.py -d .com

<>

Checking with nmap the reverse DNS hostnames of every /24 netblock using system default resolver...
<>

Searching for .com emails in google
<>

Checking 55 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason -oA <output_directory>/nmap/.sn)
<>

---This is where script breaks and kicks out the following error---

<type 'exceptions.ValueError'>
('No closing quotation',)
No closing quotation
<type 'exceptions.ValueError'>
('need more than 1 value to unpack',)
need more than 1 value to unpack
Traceback (most recent call last):
File "./domain_analyzer.py", line 2837, in
main()
File "./domain_analyzer.py", line 2765, in main
analyze_domain(unrelated_domain)
File "./domain_analyzer.py", line 2256, in analyze_domain
x, y = inst # getitem allows args to be unpacked directly
ValueError: need more than 1 value to unpack
root@--- #

[*] Downloading malware domain list from http://mirror1.malwaredomains.com/files/justdomains

Password:
[!] Login failed

Hey,
GIFs in READMEs are really cool, but this one has a lot of unused space to the right, making it little bit impossible to read.
If you crop about 1/3 of the blank space in the right edge, the GIF will be better distributed to the screen, and the letters will become readable.

That's just for demonstration purposes, and doesn't affect the application itself (of course), which, by the way, is AWESOME!

It's not longer possible to use urllib3 to query google, as any query redirects to the consent page which is not easy to bypass. The Google serapi API allows to query google without issue.

root@560519d1cc64:/domain_analyzer# python2.7 domain_analyzer.py -d .gov -k 10 -b
Domains should not start with a '.'. So I'm stripping it off. The domain I'm looking for now is: gov.
Finding 10 pseudo-random sub-domains to analyze in the gov. domain.

WARNING! Something prevent us from obtaining results from google. Try again the same command until it succeed. If it does > not work (because you use this feature many times) google could have blocked you for five minutes or so.

Migrate to googlesearch package.

¿Han considerado poner un Disclosure?

Ej,
Este software es para uso meramente educativo, no nos hacemos responsables por el mal uso que se le de.

Not running, says "You need to install python-dnspython. apt-get install python-dnspython" I tried installing it with apt but package not found. Downloaded and install dnspthon manually but still the same thing.

Hey,

first thanks for your great project!

My System:
Virtualbox recent Kali Rolling 64 Bit (Host: Win10 Pro 64Bit)

If use following command:
sudo domain_analyzer.py -d $target -o -e

I always get following Error for "Searching for mynaric.com. emails in Google":
"Can't connect to Google Web!"

What do i missing or is this an general issue?

Cheers
Flo

During check_active_host() nmap is called using -sP option and the following warning appears:
Warning: The -sP option is deprecated please use -sn

Hi,
Just used your tool to crawl a website and found this in the output:

---

Summary of https://https://ftp.example.com

Looks like the url scheme is already in the host_name variable.

Cheers

PS: it's a really interesting tool, thanks for making it