[1.6.3] - 2026-06-29

Changed

• Bumped DNSRecon version to 1.6.3.

Security

• Replaced backtracking-prone -t/--type scan validation with deterministic parsing to prevent ReDoS on malformed type input.

[1.6.1] - 2026-05-23

Security

• Hardened REST API wordlist handling so requests can only use bundled wordlists or files under directories configured with DNSRECON_WORDLIST_DIRS. (b7d8452)
• Parameterized SQLite output writes and capped REST API thread_num values to reduce injection and resource-exhaustion risk. (b7d8452)
• Hardened GitHub Actions workflows and added dependency review and Scorecard coverage. (e1b9d65)

Changed

• Bumped DNSRecon version to 1.6.1. (8df618d)
• Updated runtime dependencies including fastapi to 0.136.1, uvicorn[standard] to 0.47.0, stamina to 26.1.0, ujson to 5.12.1, and idna to 3.15.
• Updated development, Docker, and CI dependencies including ruff to 0.15.14, pytest to 9.0.3, setuptools to >=82.0.1, the Python Docker base image, CodeQL, setup-uv, Docker actions, and harden-runner.
• Regenerated uv.lock for the 1.6.1 dependency set. (1a8f575)

Fixed

• Corrected general enumeration to use Yandex scraping for Yandex results and to guard optional address fields before collecting WHOIS IPs. (91b8999)
• Made WHOIS reverse lookup selection safe for non-interactive runs by defaulting to all discovered ranges when stdin is not a TTY. (982aef8)
• Made crt.sh, Bing, Yandex, and WHOIS enumeration log external-source failures and continue instead of aborting the scan. (ec3ec7e)
• Corrected REST API reverse-range parsing, AXFR success reporting, recursion checks, empty reverse lookups, and related validation behavior. (b7d8452)
• Removed stray XML text from the license header. (214a96c)

[1.6.0] - 2026-02-28

Added

• Added Shodan support for netblock expansion during DNS enumeration and API enhancements to leverage it (Fixes #104). (12a5b15)

Changed

• Bumped DNSRecon version to 1.6.0.
• Updated FastAPI to 0.134.0 and replaced UJSONResponse with JSONResponse for compatibility. (8360ec0)
• Bumped fastapi from 0.129.2 to 0.133.1. (8476e35)
• Bumped ruff from 0.15.2 to 0.15.4. (0c8bc7e)
• Applied Ruff fixes and formatting. (56c9c35)
• Updated dependencies. (5db0595)
• Bumped uvicorn[standard] from 0.40.0 to 0.41.0. (78137d2)
• Bumped ruff from 0.15.1 to 0.15.2. (5fecb97)
• Updated dependencies. (1cad9df)
• Updated dependencies. (506d8d3)
• Bumped fastapi from 0.128.5 to 0.128.6. (ed58132)
• Bumped fastapi from 0.128.2 to 0.128.5. (08c6dc4)
• Merged pull request #454. (1b90c5a)
• Bumped fastapi from 0.128.0 to 0.128.2. (09b5f09)
• Applied fix related to issue #453. (32d2382)

[1.5.3] - 2025-12-30

Removed

• Removed lxml dependency as it is no longer required for crt.sh scraping. (1a3efd6)

Added

• Added recursion control to DnsHelper and corresponding CLI options this is in relation to #308. (a27b244)
• Added uv.lock for dependency management and improved project isolation. (0e1f4bc)
• Added FUNDING.yml to enable project sponsorship. (e9aef30)

Changed

• Migrated CI/CD workflows to use uv for faster and more reliable builds. (0e1f4bc)
• Updated multiple dependencies (fastapi, uvicorn, stamina, pytest, ruff) to their latest versions.
• Added type ignore comment for CORSMiddleware validation in API implementation. (beda5fe)
• Refactored code across parser and DNS utility modules, including adding type annotations and improving error handling. (e402af2)
• Switched crt.sh enumeration to use the JSON API query instead of HTML scraping for improved reliability. (1a3efd6)
• Updated fastapi to version 0.128.0. (1a3efd6)

Fixed

• Resolved issue #308 regarding recursion control. (a27b244)
• Adjusted zone transfer test threshold to improve test stability. (c3ef676)
• Applied code style fixes and formatting using Ruff. (302279f)

1.5.2 - 2025-12-23

Added

• Added uv.lock for dependency management and improved project isolation. (0e1f4bc)
• Added FUNDING.yml to enable project sponsorship. (e9aef30)

Changed

• Migrated CI/CD workflows to use uv for faster and more reliable builds. (0e1f4bc)
• Updated all dependencies to their latest versions.
• Replaced requests with httpx to modernize HTTP handling. (12827ab)
• Added support for Python 3.14. (12827ab)
• Added type ignore comment for CORSMiddleware validation in API implementation. (beda5fe)

Fixed

• Adjusted zone transfer test threshold to improve test stability. (c3ef676)
• Applied code style fixes and formatting using Ruff. (302279f)
• Resolved issue #432 to actually fix python 3.14 support. (880e76b)

Thanks to @timols for his very handy addition of adding retry support

What's Changed

• Fix issue with writing records to the db when scraping by @timols in #385
• Add ability for crtsh scraping to be retried by using stamina by @timols in #380

Package Maintainer Required Changes

The following new Python libraries are required as dependencies for DNSrecon

stamina==25.1.0

New Contributors

• @timols made their first contribution in #385

Full Changelog: 1.5.0...1.5.1

What's Changed

Introduce a RestAPI for DNSrecon, which can be run by running restdnsrecon.py script

Package Maintainer Required Changes

The following new Python libraries are required as dependencies for DNSrecon

fastapi==0.116.1
uvicorn[standard]==0.35.0
slowapi==0.1.9
ujson==5.10.0

Full Changelog: 1.4.0...1.5.0

What's Changed

• Ensure provided nameservers are used in DNS queries by @hyperNURb in #339
• Fix python3 compatibility by @hyperNURb in #340
• L1ghtn1ng - fix (Add caa record support) #330
• L1ghtn1ng - fix #364
• Require Python 3.12 as a minimum supported python version
• Moved the project to use uv for dependency management
• CI updates

New Contributors

• @hyperNURb made their first contribution in #339

Full Changelog: 1.3.1...1.4.0

What's Changed

• Fix some problems within brute_tlds function by @frapava98 in #322
• Fix copy-paste errors by @frapava98 in #323
• Fix log file location by @yigitsever in #325
• rectify inaccurate docstring for search engine by @CyberFlameGO in #326
• Use timeout in dnspython calls by @yigitsever in #329

New Contributors

• @yigitsever made their first contribution in #325
• @CyberFlameGO made their first contribution in #326

Full Changelog: 1.3.0...1.3.1

Big Thanks to Paul aka @McFacePunch for the fixes and addition in this release as the mvp and other community members.

What's Changed

• move run layer earlier to improve layer caching by @lpmi-13 in #300
• fixed None Type is not iterable errors when type is list | None by @mr-pmillz in #310
• fixing IP not subscriptable and CIDR expansion issues by @McFacePunch in #316
• Feature: Disable nxdomain hijacking check using flag. by @McFacePunch in #318
• Bug fix brute tld. by @McFacePunch in #319
• Feature: added -iL flag similar to nmap for passing a list of input domains by @McFacePunch in #320
• Made python 3.11 the min required version
• Added logging functionality using loguru
• Updated tests
• loguru and requests libraries are new required dependencies

New Contributors

• @mr-pmillz made their first contribution in #310
• @McFacePunch made their first contribution in #316

Full Changelog: 1.2.0...1.3.0