domain_to_dns enricher fails: dnsx missing required -w (wordlist) flag
Bug description
The domain_to_dns enricher (dnsx) fails on every run with a Docker command error.
Error log Error running dnsx: Docker error while running projectdiscovery/dnsx:latest: Command '-d amalya-ia.fr -a -aaaa -json -silent' in image 'projectdiscovery/dnsx:latest' returned non-zero exit status 1: missing wordlist(w) flag required with domain(d) input
Steps to reproduce
- Fresh install via
make prodon Docker Desktop (Windows/WSL2) - Add a domain entity (e.g. amalya-ia.fr)
- Launch
domain_to_dnsenricher - Enricher fails immediately, no output
Expected behavior DNS resolution (A/AAAA records) without requiring a wordlist flag, per the enricher description ("Resolve a domain's A/AAAA records using dnsx").
Environment
- Flowsint installed via docker-compose.prod.yml, latest images
- Docker Desktop on Windows, WSL2 backend
- Other enrichers (domain_to_website) work fine after fixing an unrelated docker.sock permission issue on celery/api containers (group_add: ["0"] needed for non-root container user to access the mounted socket)
Note
domain_to_asn also requires a PDCP_API_KEY vault secret not mentioned anywhere in setup docs — might be worth documenting which enrichers need external API keys upfront.
Source: reconurge/flowsint