Merge pull request #318 from McFacePunch/disable_check_nxdomain

dnsrecon/cli.py

@@ -1631,6 +1631,9 @@ def main():
             help='Continue brute forcing a domain even if a wildcard record is discovered.',
             action='store_true',
         )
+        parser.add_argument(
+            '--disable_check_nxdomain', help='Disables check for NXDOMAIN hijacking on name servers.', action='store_true'
+        )
         parser.add_argument(
             '--disable_check_recursion',
             help='Disables check for recursion on name servers',
@@ -1790,8 +1793,9 @@ def main():
                 # Exit if we cannot resolve it
                 print_error(f"Could not resolve NS server provided and server doesn't appear to be an IP: {entry}")
 
-            if check_nxdomain_hijack(socket.gethostbyname(entry)):
-                continue
+            if not arguments.disable_check_nxdomain:
+                if check_nxdomain_hijack(socket.gethostbyname(entry)):
+                    continue
 
             if netaddr.valid_glob(entry):
                 ns_server.append(entry)