fixes #924 /claim #924

Proposed changes

Instead of re-implementing wildcard logic, this imports and extends the stable wildcard resolver from https://github.com/projectdiscovery/shuffledns/tree/dev/pkg/wildcards into pkg/wildcards/.

When enabled:

  • Root domains are auto-detected from input (from -d flag in bruteforce mode, or extracted via public suffix list in -l list mode)
  • Each resolved host is checked inline during resolution — random subdomain queries are used to detect wildcard IPs, with caching for performance
  • Wildcard matches are silently filtered from output
  • Works with all output modes (plain, -json, -resp, etc.)
  • Mutually exclusive with the existing -wd flag; not supported in stream mode

Checklist

  • Pull request is created against the dev branch
  • All checks passed (lint, unit/integration/regression tests etc.) with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

Summary by CodeRabbit

  • New Features
    • Added an –auto-wildcard (-aw) option to auto-detect and filter wildcard DNS responses, skipping wildcard subdomains during scans.
    • Auto-wildcard is incompatible with existing wildcard-domain options and is disabled in stream mode to avoid conflicts.
    • Wildcard detection now reports filtered counts and persists wildcard data to/from a file for reuse.

Claim

Total prize pool $100
Total paid $0
Status Pending
Submitted March 03, 2026
Last updated March 03, 2026

Contributors

AQ

Aqil Ahmad

@Aqil-Ahmad1

100%

Sponsors

PR

ProjectDiscovery

@projectdiscovery

$100