20 February 2007 | 10,959 views

Fierce Domain Scanner Released – Domain Reconnaissance Tool

Acunetix Web Application Security

Fierce domain scan was born out of personal frustration after performing a web application security audit. It is traditionally very difficult to discover large swaths of a corporate network that is non-contiguous. It’s terribly easy to run a scanner against an IP range, but if the IP ranges are nowhere near one another you can miss huge chunks of networks.

Fierce

First what fierce is not. Fierce is not an IP scanner, it is not a DDoS tool, it is not designed to scan the whole internet or perform any un-targeted attacks. It is meant specifically to locate likely targets both inside and outside a corporate network. Only those targets are listed. No exploitation is performed. Fierce is a reconnaissance tool. Fierce is a PERL script that quickly scans domains (usually in just a few minutes, assuming no network lag) using several tactics.

First it queries your DNS for the DNS servers of the target. It then switches to using the target’s DNS server (you can use a different one if you want using the -dnsserver switch). Fierce then attempts to dump the SOA records for the domain in the very slim hope that the DNS server that your target uses may be misconfigured.

Once that fails (because it almost always will) it attempts to “guess” names that are common amongst a lot of different companies. Don’t ask me where I got the list, it’s just a list of names that id and I have seen all over the place. I thought about adding a dictionary to this, but I think that would take a lot longer, and given that very few of the words are dictionary words I don’t think this would add a lot of value.

The syntax is something like this:

You can download Fierce Domain Scanner here:

fierce.pl – Download host list: hosts.txt

More info here:

Fierce Domain Scanner

Written by RSnake with input from id, Vacuum and Robert E Lee.





                

Recent in Hacking Tools:
- EyeWitness – A Rapid Web Application Triage Tool
- wig – WebApp Information Gatherer – Identify CMS
- Capstone – Multi-platform, Multi-architecture Disassembly Framework

Related Posts:
- Samurai Web Testing Framework 0.6 Released – Web Application Security LiveCD
- Samurai Web Testing Framework v0.8 Released – Pen Testing Security LiveCD
- Samurai Web Testing Framework – Web Application Security LiveCD

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,844,816 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 1,030,253 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 613,250 views

Advertise on Darknet

One Response to “Fierce Domain Scanner Released – Domain Reconnaissance Tool”

  1. naxxtor 14 March 2007 at 8:12 pm Permalink

    I was so close to writing this script last night to emulate an external zone transfer. Nice work.

    If you want an nice target to try this out on, try a university :) They tend to have all sorts of interesting things hooked up, and most of them have giant netblocks too.