diff --git a/dnsrecon/cli.py b/dnsrecon/cli.py index c60c81c7..4ef5ade1 100755 --- a/dnsrecon/cli.py +++ b/dnsrecon/cli.py @@ -1631,6 +1631,9 @@ def main(): help='Continue brute forcing a domain even if a wildcard record is discovered.', action='store_true', ) + parser.add_argument( + '--disable_check_nxdomain', help='Disables check for NXDOMAIN hijacking on name servers.', action='store_true' + ) parser.add_argument( '--disable_check_recursion', help='Disables check for recursion on name servers', @@ -1790,8 +1793,9 @@ def main(): # Exit if we cannot resolve it print_error(f"Could not resolve NS server provided and server doesn't appear to be an IP: {entry}") - if check_nxdomain_hijack(socket.gethostbyname(entry)): - continue + if not arguments.disable_check_nxdomain: + if check_nxdomain_hijack(socket.gethostbyname(entry)): + continue if netaddr.valid_glob(entry): ns_server.append(entry)