U @6^@s0ddlZddlmZmZmZGdddeZdS)N) SpiderFootSpiderFootPluginSpiderFootEventc@sjeZdZdZddddZddddZd Zd ZeZ d Z e fd d Z ddZ ddZdddZddZd S) sfp_viewdnsz`ViewDNS.info:Investigate,Passive:Search Engines:apikey:Reverse Whois lookups using ViewDNS.info.Td)api_keyverify maxcohostzViewDNS.info API key.zMVerify co-hosts are valid by checking if they still resolve to the shared IP.zbStop reporting co-hosted sites after this many are found, as it would likely indicate web hosting.NFrcCsB||_||_t|_d|_t|D]}|||j|<q*dS)Nr)sf tempStorageresultslistaccum cohostcountkeysopts)selfsfcuserOptsoptr6/var/www/spiderfoot.crq.systems/modules/sfp_viewdns.pysetup)s  zsfp_viewdns.setupcCs dddgS)N EMAILADDR IP_ADDRESS PROVIDER_DNSrrrrr watchedEvents6szsfp_viewdns.watchedEventscCs dddgS)NAFFILIATE_INTERNET_NAMEAFFILIATE_DOMAIN_NAMECO_HOSTED_SITErrrrrproducedEvents:szsfp_viewdns.producedEventsc Csd}|dkrd}d}d}|dkr,d}d}d}|dkr@d}d }d }d |d |jd }|d|d|dt|d7}|jj||jddd} | ddkr|jddd|_dS| ddkr|jd|dSzt| d}| ds |jddd|_WdS| dr| d} | drN|jd | dd!dWdSt | |t |kr|j d"t||j | |||||d#|j | |gWn@tk r} z |jd$t| dWYdSd} ~ XYnXdS)%N reverseiphosti'domains reversensns reversewhoisqmatchesizhttps://api.viewdns.info/z /?apikey=r&=z&page=z &output=json _fetchtimeoutr)timeout useragentcode)Z400Z429500403zSViewDNS.info API key seems to have been rejected or you have exceeded usage limits.FTcontentzNo ViewDNS.info data found for queryzsX$      zsfp_viewdns.queryc Cs.|j}|j}|j}|jrdS|jd|d||jddkrZ|jddd|_dS||jkr||jd|d dSd|j|<d}|d krd }d }|d krd}d}|dkr| |rd}d }n|jddSt |_ | |||j }t }|dk r*|D]} | |} | r| |jkr2q| |kr|| nq| dkrfq|d krtd| |j|} |j| |jdrtd| |j|} || nj|j|jdkrȐq|jd7_|d kr |jdr |j| |s |jdqtd| |j|} || qdS)NzReceived event, z, from rrz3You enabled sfp_viewdns but did not set an API key!FTz Skipping z as already mapped.rr)domainrr$namerr'z6DNS provider found but not related to target, skipping)z demo1.comz demo2.comz demo3.comz demo4.comz demo5.comr _internettldsr r r#r z"Host no longer resolves to our IP.r!) eventTypemoduledatar;r rArr7r getTargetr+rrr5r?lowerappendr__name__isDomainnotifyListenersr validateIP) revent eventName srcModuleName eventDataZvalkeyidentrecZmyresrJhrKevtrrr handleEventtsp          zsfp_viewdns.handleEvent)r#)rU __module__ __qualname____doc__roptdescsr r;rrrdictrrr"r5rarrrrrs$   6r)r=sflibrrrrrrrr s