scan

type Config struct {
	Domain      string
	Entries     []string
	Concurrency int
	Timeout     time.Duration
	DNSServer   string
	Simulate    bool
	HitRate     int
	Seed        uint64 // simulation seed: the same seed reproduces the same simulated results
	Attempts    int
	Force       bool
	Verbose     bool     // log every lookup; through Logf when set, else unsynchronized to stderr
	Logf        dns.Logf // receives verbose lines when Verbose is set
	Rate        int      // max DNS messages per second on the wire, all workers combined (0 = unlimited)
	Types       []string // record types to look up (A, AAAA, CNAME); empty = A,AAAA
	Recursive   bool     // enumerate subdomains of discovered subdomains
	Depth       int      // max recursion depth (1 = no recursion)
	NoAbort     bool     // keep scanning after the reliability guard fires
	MaxQueries  int      // cap on admitted candidate names (jobs), not wire queries (0 = unlimited)
	Exclude     []string // out-of-scope names and *.parent patterns; never queried (#87)

	// Resuming an interrupted scan (#73): ResumeFrom skips the wordlist
	// entries before it (Stats.RootDone of the interrupted run), and
	// ResumeParents are names found before the interrupt whose children a
	// recursive scan still has to expand.
	ResumeFrom    int
	ResumeParents []string
	Resolver      *net.Resolver // reused across lookups; nil means scan.Run constructs one
	// Pool, when set, spreads candidate lookups over several resolvers (#69).
	// Every pool hit is re-validated against Resolver (the trusted
	// -dns-server), whose answer is the one reported; preflight and wildcard
	// checks also use Resolver.
	Pool *dns.Pool
	// contains filtered or unexported fields
}

type Event struct {
	Kind      EventKind
	Notice    NoticeKind   // EventNotice: what the notice is about
	Domain    string       // EventResult: the resolved subdomain
	Records   []dns.Record // EventResult: the resolved records (A/AAAA/CNAME)
	Takeover  string       // EventResult: subdomain-takeover hint, see dns.TakeoverHint (#71)
	Processed int64        // EventProgress
	Total     int64        // EventProgress
	Found     int64        // EventProgress / EventDone
	Message   string       // EventError / EventNotice
	Stats     Stats        // EventDone: per-outcome counters
}

type EventKind int

type NoticeKind int

type Options struct {
	Domain      string
	Entries     []string
	Concurrency int
	TimeoutMs   int
	DNSServer   string
	Simulate    bool
	HitRate     int
	Seed        uint64
	Attempts    int
	Force       bool
	Types       []string
	Recursive   bool
	Depth       int
	Rate        int
	MaxQueries  int
	Exclude     []string
	Pool        *dns.Pool // -r resolver pool; DNSServer is then the trusted resolver
	// Resume point of an interrupted scan (#73); see Config.
	ResumeFrom    int
	ResumeParents []string
	NoAbort       bool
	Verbose       bool
	Logf          dns.Logf
}

type Stats struct {
	Found            int64
	NXDomain         int64
	Timeout          int64
	Refused          int64
	Other            int64
	WildcardFiltered int64

	// Run facts for the quality report (#70); not part of Sum.
	QueriesSent int64 // DNS queries dialed, retries included (0 when simulated)
	Skipped     int64 // candidates not tested because -max-queries was reached
	Excluded    int64 // candidates not tested because -exclude put them out of scope
	PoolHits    int64 // names a pool resolver said exist (-r)
	Confirmed   int64 // pool hits the trusted resolver confirmed
	Unconfirmed int64 // pool hits the trusted resolver said do not exist
	Takeover    int64 // results flagged as subdomain-takeover candidates
	// RootDone is the resume point: every wordlist entry before this index
	// has been fully looked up (#73). Entries at or after it may also be
	// done; resuming repeats at most a worker pool's worth of lookups.
	RootDone    int64
	Aborted     bool         // the reliability guard cancelled the scan
	Wildcard    bool         // the root domain is a wildcard (scanned under -force)
	Fingerprint []dns.Record // final wildcard fingerprint, empty when none
}