U @6^e@sHddlZddlZddlZddlZddlmZmZmZGdddeZ dS)N) SpiderFootSpiderFootPluginSpiderFootEventc@sNeZdZdZddiZddiZdZdZefddZ dd Z d d Z d d Z dS) sfp_dnsrawzhDNS Raw Records:Footprint,Investigate,Passive:DNS::Retrieves raw DNS records such as MX, TXT and others.verifyTzVerify SPF hostnames resolve.NcCsD||_||_||_d|_t|D]}|||j|<q,dS)NDNS)sf tempStorageeventschecked__dataSource__listkeysopts)selfsfcuserOptsoptr5/var/www/spiderfoot.crq.systems/modules/sfp_dnsraw.pysetup%s   zsfp_dnsraw.setupcCs dddgS)N INTERNET_NAME DOMAIN_NAMEZDOMAIN_NAME_PARENTrrrrr watchedEvents/szsfp_dnsraw.watchedEventsc Csddddddddd g S) N PROVIDER_MAIL PROVIDER_DNSRAW_DNS_RECORDSDNS_TEXTDNS_SPFrZINTERNET_NAME_UNRESOLVEDAFFILIATE_INTERNET_NAMEZ"AFFILIATE_INTERNET_NAME_UNRESOLVEDrrrrrproducedEvents5s  zsfp_dnsraw.producedEventsc Cs|j}|j}|j}|j|}d}|}|jd|d|||jkr\|jd|dSd|j|<|jd|t}ddgdd gd d gd } t| D]} | rdSzt j |t j| } |jd ddkr|jd } nt j} | jd} t jj| | dd}|jD]}t||jkr2qd|jt|<t| D]}|jdt|d| |dt| |dtjtjB}t|t|}t|dkrqL|D]N}|jd|t|}t | |d||j!|}|"|| dkr2|#j$|ddds2t d||j!|}|"|| dkrd|krt d||j!|}|"|td|tjtjB}|r|D]}d|krq|#j$|dddrd}nd}|jdr|j%|s|jd|d |d!7}t |||j!|}|"|qqqLt|}t d"||j!|}|"|qWqt&k r}z*|j'd#|d$| d%t|d&W5d}~XYqXqdS)'NzReceived event, z, from zSkipping duplicate event for TzGathering DNS records for z(\S+\s+(?:\d+)?\s+IN\s+MX\s+\d+\s+(\S+)\.rz"\S+\s+(?:\d+)?\s+IN\s+NS\s+(\S+)\.rz\S+\s+TXT\s+"(.[^"]*)"r)MXNSTXT _dnsserverr)timeoutz Checking z + against z Matched: r$)includeChildrenincludeParentsr zv=spfrzinclude:(.+?) _rrzHost z could not be resolvedZ _UNRESOLVEDrz"Failed to obtain DNS response for (z): F)( eventTypemoduledatar hashstringdebugr dictr r checkForStopdnsmessage make_query rdatatype from_textrgetresolverget_default_resolver nameserversqueryudpanswerstrr recompile IGNORECASEDOTALLfindalllenr__name__notifyListeners getTargetmatches resolveHost BaseExceptionerror)revent eventName srcModuleName eventData eventDataHashaddrs parentEventZrecdataZrecsrecreqnnsresxrxpatgrpsmstrdataevtrKdomainZevt_typeerrr handleEvent;s       $       zsfp_dnsraw.handleEvent) rH __module__ __qualname____doc__roptdescsr r r3rrr!rdrrrrrs r) rB dns.resolverr5 dns.query dns.rdatatypesflibrrrrrrrrs