Module: TLDSearch

[TheTechromancer]

Having a module that raises DNS_NAMEs for all possible TLD permutations of a target. E.g. given evilcorp.com, it would raise:

• evilcorp.net
• evilcorp.org
• evilcorp.ai
• ...etc.

Pairing this with other modules like Azure Tenant ID lookup could easily discover affiliates / related targets.

Spiderfoot module for reference.

@aconite33

[liquidsec]

This would probably not be especially useful except in cases where CIDR is being used for targets, but would be incredibly useful once ASN is a target type...

#2321

[TheTechromancer]

ASN is not the only way to check whether a domain is owned by the target, as mentioned above, another is by Azure tenant.

[liquidsec]

true, but unless the azure tenant is in the target, we shouldn't automatically treat other things in the tenant is in scope, right?