yevheniya-nosyk / dnssoftver

A tool to fingerprint DNS resolver software.

dnssoftver

A tool to fingerprint DNS resolver software.

All the supported versions are in SOFTWARE.md.

Usage

Requirements

This project requires Python 3.10 or higher.

Install all the requirements inside a virtual environment:

$ python3 -m virtualenv -p python3.10 .venv
$ source .venv/bin/activate
$ pip3 install -r requirements.txt

Scan

The input to the scanner is a text file with one IP address per line. The output is a JSON file:

$ python3 src/scan.py --input_file <input_file> --output_file <output_file> --granularity [vendor,major,minor,build] --threads <num_of_threads>

Example output:

{
    "ip": "1.2.3.4",
    "versions": ["bind9"]
}

Build from scratch

If you wish to launch all the software, issue test cases, generate fingerprints and models, follow the instructions in BUILD.md.

How to contribute

Read CONTRIBUTING.md.

dnssoftver's Issues

InconsistentVersionWarning: Trying to unpickle estimator DecisionTreeClassifier from version xxx when using version yyy

First of all, thanks for a great project!

Version affected: b081442

Trivial test run revealed a warning about potentially problematic use of library. Reproducer:

echo 127.0.0.111 > iplist
python3 src/scan.py --input_file iplist -o /dev/stdout -g build

/usr/lib/python3.12/site-packages/sklearn/base.py:376: InconsistentVersionWarning: Trying to unpickle estimator DecisionTreeClassifier from version 1.4.0 when using version 1.4.2. This might lead to breaking code or invalid results. Use at your own risk. For more info please refer to:
https://scikit-learn.org/stable/model_persistence.html#security-maintainability-limitations

The URL linked says:

You should never load a pickle file from an untrusted source, similarly to how you should never execute code from an untrusted source.

This is concerning because it seems that the distributed files are not portable and are not easy to audit. I mean, I can have a look at source to see if it does something nasty, but with pickled files it's much harder...