3 @6^@s0ddlZddlmZmZmZGdddeZdS)N) SpiderFootSpiderFootPluginSpiderFootEventc@sjeZdZdZddddZddddZd Zd ZeZ d Z e fd d Z ddZ ddZdddZddZd S) sfp_viewdnsz`ViewDNS.info:Investigate,Passive:Search Engines:apikey:Reverse Whois lookups using ViewDNS.info.Td)api_keyverify maxcohostzViewDNS.info API key.zMVerify co-hosts are valid by checking if they still resolve to the shared IP.zbStop reporting co-hosted sites after this many are found, as it would likely indicate web hosting.NFrcCsF||_|j|_t|_d|_x"t|jD]}|||j|<q,WdS)Nr)sf tempStorageresultslistaccum cohostcountkeysopts)selfsfcuserOptsoptr6/var/www/spiderfoot.crq.systems/modules/sfp_viewdns.pysetup)s  zsfp_viewdns.setupcCs dddgS)N EMAILADDR IP_ADDRESS PROVIDER_DNSr)rrrr watchedEvents6szsfp_viewdns.watchedEventscCs dddgS)NAFFILIATE_INTERNET_NAMEAFFILIATE_DOMAIN_NAMECO_HOSTED_SITEr)rrrrproducedEvents:szsfp_viewdns.producedEventsc Csd}|dkrd}d}d}|dkr,d}d}d}|dkr@d}d }d }d |d |jd }|d|d|dt|d7}|jj||jddd} | dd(kr|jjddd|_dS| ddkr|jjd|dSytj| d}|j ds |jjd dd|_dS|j d!r|j d!} | j d"rJ|jjd#| j d"d$ddSt | j |t |kr|jj d%t||j j| j ||j|||d&|j j| j |gWn8tk r} z|jjd't| ddSd} ~ XnXdS))N reverseiphosti'domains reversensns reversewhoisqmatchesizhttps://api.viewdns.info/z /?apikey=r&=z&page=z &output=json _fetchtimeoutr)timeout useragentcode400429500403zSViewDNS.info API key seems to have been rejected or you have exceeded usage limits.FTcontentzNo ViewDNS.info data found for queryzsV$      zsfp_viewdns.queryc Cs4|j}|j}|j}|jrdS|jjd|d||jddkrZ|jjddd|_dS||jkr||jjd|d dSd|j|<d}|d krd }d }|d krd}d}|dkr|j j |rd}d }n|jjddSt |_ |j |||j }t }|dk r0x(|D]} | j|} | r | j|jkr6q | j|kr |j| jnq | jd krjq |d krtd| |j|} |jj| |jdr td| |j|} |j| nj|j|jdkr̐q |jd7_|d kr|jdr|jj| |s|jjdq td| |j|} |j| q WdS)!NzReceived event, z, from rrz3You enabled sfp_viewdns but did not set an API key!FTz Skipping z as already mapped.rr(domainrr#namerr&z6DNS provider found but not related to target, skipping demo1.com demo2.com demo3.com demo4.com demo5.comr _internettldsrr r"r z"Host no longer resolves to our IP.r )rOrPrQrRrS) eventTypemoduledatar<r rBrr8r getTargetr*rrr6r@lowerappendr__name__isDomainnotifyListenersr validateIP) revent eventName srcModuleName eventDataZvalkeyidentrecZmyresrKhrLevtrrr handleEventtsp         zsfp_viewdns.handleEvent)r")r[ __module__ __qualname____doc__roptdescsr r<rrrdictrrr!r6rgrrrrrs   6r)r>sflibrrrrrrrr s