fixes #924
/claim #924
Proposed changes
Instead of re-implementing wildcard logic, this imports and extends the stable wildcard resolver from
https://github.com/projectdiscovery/shuffledns/tree/dev/pkg/wildcards into pkg/wildcards/.
When enabled:
- Root domains are auto-detected from input (from -d flag in bruteforce mode, or extracted via public suffix list in -l list mode)
- Each resolved host is checked inline during resolution — random subdomain queries are used to detect
wildcard IPs, with caching for performance
- Wildcard matches are silently filtered from output
- Works with all output modes (plain, -json, -resp, etc.)
- Mutually exclusive with the existing -wd flag; not supported in stream mode
Checklist
- Pull request is created against the dev branch
- All checks passed (lint, unit/integration/regression tests etc.) with my changes
- I have added tests that prove my fix is effective or that my feature works
- I have added necessary documentation (if appropriate)
Summary by CodeRabbit
- New Features
- Added an –auto-wildcard (-aw) option to auto-detect and filter wildcard DNS responses, skipping wildcard subdomains during scans.
- Auto-wildcard is incompatible with existing wildcard-domain options and is disabled in stream mode to avoid conflicts.
- Wildcard detection now reports filtered counts and persists wildcard data to/from a file for reuse.