-passive Option Is Ignored

[z0kk]

This affects the version that come with Kali, the binary in the repo, and when installing from source:

The logs also report that certain results were removed because they couldn't be resolved.

This doesn't happen with the version that's installed with Snap:

Unfortunately, that version has a different issue which I describe at #1051 (and have since closed because it only affects the Snap version).

[z0kk]

Just a quick follow-up on this. According to the docs, Amass has three modes:

• Normal - The enum subcommand without specifying active or passive will grab subdomains from the data sources and use DNS to validate them.
• Active - Includes grabbing TLS certs, doing DNS zone transfers, NSEC walking, etc.
• Passive - Blindly accept data from the data sources, without attempting to validate them.

So passive mode is what I'm attempting to run. However, I notice that the current help shows that passive is now the default mode (and the -passive option is deprecated). But what seems to be the case is that normal is the default mode (which enum --passive uses), not passive mode.

If that is indeed what is happening, is there a way to invoke the old passive mode? Amasss runtime becomes painfully long in normal mode, and many of us have other, more efficient, ways to validate discovered subdomains.