Sha256: 4b1cf7dc36ec3828e0b5758f158f5d9c188bcbf6364b86f2245b54f558e70cb0
Contents?: true
Size: 1.29 KB
Versions: 16
Compression:
Stored size: 1.29 KB
Contents
# frozen_string_literal: true
require "dnstwister"
require "resolv"
require "parallel"
module Mihari
module Analyzers
class DNSTwister < Base
attr_reader :query
attr_reader :type
attr_reader :title
attr_reader :description
attr_reader :tags
def initialize(query, title: nil, description: nil, tags: [])
super()
@query = query
@type = TypeChecker.type(query)
@title = title || "dnstwister domain lookup"
@description = description || "query = #{query}"
@tags = tags
end
def artifacts
lookup || []
end
private
def valid_type?
type == "domain"
end
def api
@api ||= ::DNSTwister::API.new
end
def resolvable?(domain)
Resolv.getaddress domain
true
rescue Resolv::ResolvError => _e
false
end
def lookup
raise InvalidInputError, "#{query}(type: #{type || 'unknown'}) is not supported." unless valid_type?
res = api.fuzz(query)
fuzzy_domains = res.dig("fuzzy_domains") || []
domains = fuzzy_domains.map { |domain| domain.dig("domain") }
Parallel.map(domains) do |domain|
resolvable?(domain) ? domain : nil
end.compact
end
end
end
end
Version data entries
16 entries across 16 versions & 1 rubygems