Mantis DNS

[Kotriksnov]

Hi,

I am David Kotriksnov (SH4V). I have developed a tool for collecting information of DNS servers and domain names. Its name is Mantis. Among its functions we can see:

[-0] Makes a DNS query simple query.
		mantis.rb -0 mx domain.net
	
	[-1] Starts a zone transfer(s) (axfr) to all DNS servers associated with the domain name.
		mantis.rb -1 domain.net

	[-2] Starts an incremental zone transfer(s) (ixfr) to all DNS servers associated with the domain name.
		mantis.rb -2 domain.net
		
	[-3] Makes a crawl of subdomains in the domain name given. It includes a dictionary but you can also use your own.
		mantis.rb -3 domain.net 
		mantis.rb -3 domain.net dic.txt
		
	[-4] Makes a reverse domain scan with an IP address interval given.
		mantis.rb -4 192.168.1.0
		mantis.rb -4 192.168.1.231
		mantis.rb -4 192.168.1.1 192.168.1.164
		
	[-5] Resolves domains name in the same server (Vhosts).
		mantis.rb -5 domain.net
		mantis.rb -5 192.168.114
		
	[--all] Make a torbelline of querys.
		 --all domain.net
		
	[--mantis] Make a Mantis Attack.
		mantis.rb --mantis 192.168.1.0
		mantis.rb --mantis 192.168.1.231
		mantis.rb --mantis 192.168.1.1 192.168.1.164

I have prepared a video showing how to use it though it's in Spanish. Along the video you can see what Mantis can do.



The code is here:

http://n3t-datagrams.net/lab/mantis2.rb.txt

Edit: I have added subtitles. If you want to see the video in English language, visit the original link http://www.youtube.com/watch?v=bsofmud2o7A and:



Hope you like it!

[Kotriksnov]

I would like to know what do you guys think about this tool. I developed it because other tools related to DNS seemed to me quite incomplete. I think it could have a place in /pentest/enumeration/dns/.

Please, reply this thread with your opinions, functions it might have to be better, doubts, etc.

SH4V.

[rshift]

This tool looks VERY promising. I'm going to test it out now and I appreciate you delivering this

[Kotriksnov]

Thanks rshift! I hope you like it. It would be great that more people try it and comment here.