Skip to content

Commit 53dc62e

Browse files
author
Blake Jacobs
committed
Updated the README.md file
1 parent c73785e commit 53dc62e

File tree

1 file changed

+15
-1
lines changed

1 file changed

+15
-1
lines changed

README.md

Lines changed: 15 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,8 @@ Make sure you have rust installed, then run the following command to install dns
1212
git clone https://github.com/ethicalhackingplayground/dnsresolver ; cd dnsresolver ; cargo install --path .
1313
```
1414

15+
---
16+
1517
# Usage
1618

1719
```bash
@@ -21,7 +23,7 @@ cat subs.txt | dnsresolver
2123
If you need to resolve hosts with any ports, you can use the `--ports` flag.
2224

2325
```bash
24-
cat subs.txt | dnsresolver -p 8080,8081
26+
cat subs.txt | dnsresolver -p 443,80,8080,8081
2527
```
2628

2729
### Virtual Host Enumeration
@@ -42,6 +44,12 @@ make sure to increase the soft limit using `ulimit -n 10000` so we can handle mo
4244
cat subs.txt | dnsresolver --vhost --vhost-file domains.txt
4345
```
4446

47+
To validate a finding run this curl command:
48+
49+
```bash
50+
curl -v -k thehost.com -H "Host: unresolved-domain.com"
51+
```
52+
4553
#### Using Localhost
4654

4755
You can also use the `--vhost` flag with the `--check-localhost` flag to replace the host header with localhost, often times this allows you to access
@@ -51,6 +59,12 @@ restricted pages and can lead to some information disclosures and juicy admin pa
5159
cat subs.txt | dnsresolver --vhost --check-localhost
5260
```
5361

62+
To validate a finding run this curl command:
63+
64+
```bash
65+
curl -v -k thehost.com -H "Host: localhost"
66+
```
67+
5468
# Demonstrations
5569

5670
[![asciicast](https://asciinema.org/a/g8lpcHqYeiYdljWxShrgX8naP.svg)](https://asciinema.org/a/g8lpcHqYeiYdljWxShrgX8naP)

0 commit comments

Comments
 (0)