Skip to main content

Combines nmap output and DNS data to produce HTTP[S] URLs of interest.

Project description

nmine

nmine searches files for substrings that appear to be valid DNS names. It resolves them and outputs the result if the address it resolves to is of interest.

A possible name will only be considered a valid DNS name if it ends with a known TLD (see the -t and -T options). If the -s option is also specified, then a possible name must also end with one of the strings specified with that option.

Examples / Description

Let's say you have some arbitrary file (or directories of files) containing DNS names of some sort:

> ls
blah.txt
> cat blah.txt 
nothing 
The quick brown fox yahoo.com jumps over the lazy dog. hurricanelabs.com]
Lorem ipsum dolor sit amet, ex wisi elitr eruditi pro.   129831; asdf
google.com!zzzhomero has ei
;sad0uf23 www.github.com 090

You're interested in any names which resolve to any address in 192.0.0.0/8. You put this in a file called "SCOPE" (or any file specified with the -i option):

>> cat > SCOPE
192.0.0.0/8

You then run nmine while in the above directory, and any names resolving to your network(s) of interest are output:

> nmine
hurricanelabs.com.                       600 IN A 192.230.81.48
www.github.com.                          600 IN A 192.30.253.112

Options

  • -i (filename): Name of a file containing IPv4 networks of interest.

  • -n (address): Name or address of a DNS server to send all queries to.

  • -f hosts|zone: Output format. "zone" is like BIND zone files or dig output. "hosts" is like /etc/hosts.

  • -t (TLD): Specify additional TLDs to consider valid. May be specified multiple times.

  • -T: Do NOT automatically consider IANA TLDs valid. The only TLDs considered valid will be those specified with -t.

  • -s: Only consider names with this ending to be valid names at all. May be specified multiple times.

Copyright and License

Copyright (C) 2016 Hurricane Labs

nmine was written by Steve Benson for Hurricane Labs.

nmine is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version.

nmine is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; see the file LICENSE. If not, see http://www.gnu.org/licenses/.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

nmine-3.2.0.tar.gz (27.2 kB view details)

Uploaded Source

Built Distribution

nmine-3.2.0-py3-none-any.whl (26.6 kB view details)

Uploaded Python 3

File details

Details for the file nmine-3.2.0.tar.gz.

File metadata

  • Download URL: nmine-3.2.0.tar.gz
  • Upload date:
  • Size: 27.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.12

File hashes

Hashes for nmine-3.2.0.tar.gz
Algorithm Hash digest
SHA256 b6b240766104c42bec350cddee9dcfeabd5b5bd083ba9ad92e3ec39bd1cc96d8
MD5 8fb10a93b3690e427217d31603f9b610
BLAKE2b-256 22734b58a6ca0352d30f0415cc9c8409d1f6e1cbc52278c9dd9ea9730cc2e82b

See more details on using hashes here.

Provenance

File details

Details for the file nmine-3.2.0-py3-none-any.whl.

File metadata

  • Download URL: nmine-3.2.0-py3-none-any.whl
  • Upload date:
  • Size: 26.6 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.12

File hashes

Hashes for nmine-3.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 1a3143c612c200d1ad0bdee5194c1c1d20cc551c79cb098cb5695def63a7f537
MD5 ae3d68c3a6eebfeab0a9e4e86ada72ae
BLAKE2b-256 321e5696ea1db54e68e2f8d3b82f27f4b6664e9e08433db3e56c1f11cd0e6907

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page