批量域名转ip及相关信息

  • A+
所属分类:安全博客

功能描述:
将大量的域名转换成ip 按ip排序 并获取服务器基本信息

使用场景:
如某个大型网络 我们获取了数千子域名
有多个网段
我们通过ip 以及服务器基本信息 判断 域名所对应的网段 及所采用的 WebServer 服务器 版本

该脚本采用 多进程技术 加快了转换速度
控制超时时间 防止 执行卡死 丢弃 无法访问的 ip
使用前请确认您dns 解析速度够快
建议将dns 设置为 8.8.8.8114.114.114.114
或挂海外vpn
以获取最佳结果
由于该脚本使用wmi 控制多进程所以仅支持windowslinux下用其它技术实现
该脚本调用php 模块:pdo_sqlite curl 使用前请确认 您的php 开启相关模块
使用前请不要修改文件名字

windows 命令行下:

commandline > php host2ip.php host.txt
host.txt 为多个 网站域名文件
执行完毕将会在当前目录生成result.txt的结果文件

resolveip.php

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php
isset($argv[1]) ? $host = trim($argv[1]) : exit();
include 'sqlite.php';
$sql = new sqllite();
$result = _gethostbyname($host);

//域名转ip

function _gethostbyname($host) {
$ip = gethostbyname($host);
if (chk_ip($ip)) {
$i['host'] = $host;
$i['ip'] = $ip;
return $i;
}
}

if (!empty($result['ip'])) {
$sc = $sql->server_ip_exit($result['ip']);
if ($sc != 0) {

$serv = $sql->get_server($result['ip']);
$sql->insert($result['host'], $result['ip'], $serv);
}
else {
$server = get_server($result['ip']);
$sql->insert($result['host'], $result['ip'], $server);
}
}

function get_server($host) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $host);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_NOBODY, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A');
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);

$head = curl_exec($ch);
preg_match_all('/^(?:Server|X-Powered-By):s([^[:cntrl:]]+)/im', $head, $server);
$info = $server[1];
$c = count($info);
empty($info) ? $banner = false : $banner = true;
if ($banner && $c != 0) {
$c == 2 ? $return = $info[0] . ' | ' . $info[1] : $return = $info[0];
}
else {
return '(none)';
}
return $return;
}

function chk_ip($ip) {
if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 | FILTER_FLAG_NO_PRIV_RANGE) && substr($ip, 0, 4) != '127.' && substr($ip, 0, 4) != '255.' && $ip != '0.0.0.0') {
return $ip;
}
else {
return false;
}
}
?>

host2ip.php

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
<?php
date_default_timezone_set('PRC');
$start_time = func_time();
is_file($argv[1])?$hostfile=$argv[1]:exit("php $argv[0] host.txt");
$list=geturllist($hostfile);
$counts=sizeof($list);

$Refresh=3000000;//刷新时间3 秒
$thread=20; //并发
$ExecTimeout=10;
//$chunk=array_chunk($list,$thread);//从0 开始
printf("[i] 数量 %d 条,线程数%d ,刷新时间%d微秒,超时时间 %d秒rn",$counts,$thread,$Refresh,$ExecTimeout);
usleep(500000);
echo "程序执行中...rn";
foreach ($list as $c ){
$task= task('resolveip.php',$ExecTimeout);
back_run('php.exe resolveip.php '.$c);
if($task >= $thread){
usleep($Refresh);
}

}

function task($taskname,$ExecTimeout){
$LocalWMISvc=new com('WinMgmts:{impersonationLevel=impersonate}!\\.rootCIMV2');

$QueryObjSet=$LocalWMISvc->ExecQuery("select * from win32_process where commandline like '%{$taskname}%' and (name='php.exe' or name='cmd.exe')");
$taskcount= $QueryObjSet->Count;
foreach ($QueryObjSet as $process){
if((func_time() - strtotime(substr($process->CreationDate,0,14))) >= $ExecTimeout){
@exec("taskkill -pid $process->ProcessId /f 2>nul",$o,$r); //超时则强制退出
}
}
return $taskcount; //返回进程数
}



function back_run($cmd){
pclose(popen("start /B ". $cmd , "r"));
}


function _echo($str){
echo $str.PHP_EOL;

}

function func_time()
{
list($microsec, $sec) = explode(' ', microtime());
return $sec;
}

function geturllist($hostfile){
$urllist=file($hostfile);
if(is_array($urllist)){
$arr=array_unique($urllist);
$url='';
$urls='';
foreach ($arr as $s){

$p = array(
'/(http|https|ftp):///i',
'///i',
'/s*?/',
);
$url = preg_replace($p, "", $s);
if(!empty($url)){
$urls[]=$url;
}
}

}
return $urls;
}

sleep(1);
if(task('resolveip.php',$ExecTimeout) !=0){
sleep(5);
}
include 'sqlite.php';
$sql=new sqllite();
$c=$sql->show_count();
$Etime=round((func_time() - $start_time), 4);
$fs=($counts-$c);
printf("共 %d host , 转换成功 %d 条, 失败 %d 条rn耗时:%d 秒 rnrn",$counts,$c,$fs,$Etime);
$sql->dump();
//$sql->deleteTable();
$sql=null;
?>

sqlite.php

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
<?php
class sqllite
{
private $ResultFile = 'result.txt';
private $r_db;
private $r_table = 'url2ip';
public function __construct() {
try {

$this->r_db = new PDO('sqlite:url2ip.db', null, null, array(PDO::ATTR_PERSISTENT => true));
//存储结果集

//初始化 创建相应的表
$sql = "PRAGMA synchronous = OFF;";
$sql.= <<<EOF
CREATE TABLE IF NOT EXISTS {$this->r_table} (
'id' INTEGER primary key AUTOINCREMENT NOT NULL,
'domain' varchar(50) NOT NULL ,
'ip' varchar(20) NOT NULL,
'server' varchar(100)
);

CREATE UNIQUE INDEX 'unique_{$this->r_table}'
ON 'url2ip' ('domain' ASC, 'ip' ASC);
EOF;
$this->r_db->exec($sql);
}
catch(PDOException $ex) {
die("[Error] " . $ex->getMessage() . PHP_EOL . ' add/edit in php.ini' . PHP_EOL . ' extension=pdo_sqlite.so or pdo_sqlite.dll' . PHP_EOL);
}
}

public function insert($value1, $value2, $value3 = NULL) {
$db = $this->r_db;
$sql = <<<EOF
insert into {$this->r_table}('domain','ip','server') VALUES ('{$value1}', '{$value2}','{$value3}') ;
EOF;
$db->exec($sql);
}

public function show_result() {
$sql = <<<EOF
SELECT domain,ip,server from {$this->r_table} ORDER BY ip;
EOF;

$sql = $this->r_db->query($sql);
$result = $sql->fetchAll();
return $result;
}

public function show_count() {
$sql = <<<EOF
SELECT count(*) from {$this->r_table};
EOF;

$result = $this->r_db->prepare($sql);
$result->execute();
$result = $result->fetch();

return $result[0];
}

public function deleteTable() {
$db = $this->r_db;
$sql = <<<EOF
drop table if exists {$this->r_table};
delete from sqlite_sequence;
EOF;
$db->exec($sql);
}

public function server_ip_exit($ip) {
$sql = <<<EOF
SELECT count(*) from {$this->r_table} where ip='{$ip}' and server not NULL; //该ip server无值
EOF;
$result = $this->r_db->prepare($sql);
$result->execute();
$result = $result->fetch();
return $result[0];
}

public function get_server($ip) {
$sql = <<<EOF
select server from {$this->r_table} where ip='{$ip}' and server is not null limit 1;
EOF;
$result = $this->r_db->prepare($sql);
$result->execute();
$result = $result->fetch();
return $result[0];
}

/*
public function update_server($server,$ip){
$db=$this->r_db;
$sql =<<<EOF
update {$this->r_table} set server='{$server}' where ip='{ip}';
EOF;
$db->exec($sql);
}
*/

public function import($file) {
if (FALSE !== ($fp = fopen($file, 'r'))) {
$db = $this->r_db;
$db->beginTransaction();
while (!feof($fp)) {
$buffer = trim(fgets($fp, 1024));
list($host, $ip, $server) = preg_split('/s+/', $buffer);
$sql = "insert into {$this->r_table}('domain','ip','server') VALUES ('{$host}', '{$ip}','$server') ;";
$db->exec($sql);
}
$db->commit();
fclose($fp);
return true;
}
}

public function dump() {
$results = $this->show_result();

if (!empty($results) && is_array($results)) {
foreach ($results as $key => $r) {
file_put_contents($this->ResultFile, str_pad($r['domain'], 50, ' ') . str_pad($r['ip'], 50, ' ') . str_pad($r['server'], 100, ' ') . PHP_EOL, FILE_APPEND);
}
echo 'Dump Sussess! SaveTo: ' . $this->ResultFile;
}
else {

exit("Dump Fail..! The Result is the empty... rn");
}
}

public function __destruct() {
$this->r_db = null;
}
}
?>

Source:wolvez.club | Author:wolvez

相关推荐: Celery 与 RabbitMQ:关于Exchange和Queue的那些事

RabbitMQ RabbitMQ的消息流主要由两个部分组成:Exchange和Queue。 Exchange Exchange其实可以类比为一个交换机?其根据Exchange的类型和一些规则,来将消息分发到特定的Queue队列中。 RabbitMQ支持以下几…

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: