# frozen_string_literal: true # # ronin-recon - A micro-framework and tool for performing reconnaissance. # # Copyright (c) 2023-2024 Hal Brodigan (postmodern.mod3@gmail.com) # # ronin-recon is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License as published # by the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # ronin-recon is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public License # along with ronin-recon. If not, see . # require 'ronin/support/network/dns/idn' require 'ronin/support/network/dns' require 'async/io' require 'async/dns/resolver' require 'ipaddr' module Ronin module Recon module Mixins # # Mixin which adds methods for performing async DNS queries. # # @api public # module DNS # Handles International Domain Names (IDN). IDN = Support::Network::DNS::IDN # @return [Async::DNS::Resolver] attr_reader :dns_resolver # # Initializes the DNS resolver. # # @param [Array] nameservers # The DNS nameservers to query. # # @param [Hash{Symbol => Object}] kwargs # Additional keyword arguments. # def initialize(nameservers: Support::Network::DNS.nameservers, **kwargs) super(**kwargs) @dns_resolver = Async::DNS::Resolver.new( nameservers.map { |ip| [:udp, ip, 53] } ) end # # Looks up all addresses of a hostname. # # @param [String] host # The hostname to lookup. # # @return [Array] # The addresses of the hostname. # def dns_get_addresses(host) host = IDN.to_ascii(host) begin @dns_resolver.addresses_for(host).map(&:to_s) rescue Async::DNS::ResolutionFailure return [] end end # # Looks up the address of a hostname. # # @param [String] host # The hostname to lookup. # # @return [String, nil] # The address of the hostname. # def dns_get_address(host) dns_get_addresses(host).first end # # Looks up all hostnames associated with the address. # # @param [String] ip # The IP address to lookup. # # @return [Array] # The hostnames of the address. # def dns_get_names(ip) dns_get_ptr_names(ip) end # # Looks up the hostname of the address. # # @param [String] ip # The IP address to lookup. # # @return [String, nil] # The hostname of the address. # def dns_get_name(ip) dns_get_names(ip).first end alias dns_reverse_lookup dns_get_name # Mapping of record types to `Resolv::DNS::Resource::IN` classes. # # @api private RECORD_TYPES = { a: Resolv::DNS::Resource::IN::A, aaaa: Resolv::DNS::Resource::IN::AAAA, any: Resolv::DNS::Resource::IN::ANY, cname: Resolv::DNS::Resource::IN::CNAME, hinfo: Resolv::DNS::Resource::IN::HINFO, loc: Resolv::DNS::Resource::IN::LOC, minfo: Resolv::DNS::Resource::IN::MINFO, mx: Resolv::DNS::Resource::IN::MX, ns: Resolv::DNS::Resource::IN::NS, ptr: Resolv::DNS::Resource::IN::PTR, soa: Resolv::DNS::Resource::IN::SOA, srv: Resolv::DNS::Resource::IN::SRV, txt: Resolv::DNS::Resource::IN::TXT, wks: Resolv::DNS::Resource::IN::WKS } # # Queries all matching DNS records for the host name. # # @param [String] name # The host name to query. # # @param [:a, :aaaa, :any, :cname, :hinfo, :loc, :minfo, :mx, :ns, :ptr, :soa, :srv, :txt, :wks] record_type # The record type. # # @return [Array] # All matching DNS records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource # def dns_get_records(name,record_type) name = IDN.to_ascii(name) record_class = RECORD_TYPES.fetch(record_type) do raise(ArgumentError,"invalid record type: #{record_type.inspect}") end if (message = @dns_resolver.query(name,record_class)) message.answer.map { |answer| answer[2] } else [] end end # # Queries a single matching DNS record for the host name. # # @param [String] name # The host name to query. # # @param [:a, :aaaa, :any, :cname, :hinfo, :loc, :minfo, :mx, :ns, :ptr, :soa, :srv, :txt, :wks] record_type # The record type. # # @return [Resolv::DNS::Resource, nil] # The matching DNS records or `nil` if no matching DNS records # could be found. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource # def dns_get_record(name,record_type) dns_get_records(name,record_type).first end # # Queries all records of the host name using the `ANY` DNS query. # # @param [String] name # The host name to query. # # @return [Array] # All of the DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/ANY # def dns_get_any_records(name) dns_get_records(name,:any) end # # Queries the `CNAME` record for the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::IN::CNAME, nil] # The `CNAME` record or `nil` if the host name has no `CNAME` # record. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/CNAME # def dns_get_cname_record(name) dns_get_record(name,:cname) end # # Queries the canonical name for the host name. # # @param [String] name # The host name to query. # # @return [String, nil] # The canonical name for the host or `nil` if the host has no # `CNAME` record. # def dns_get_cname(name) if (record = dns_get_cname_record(name)) record.name.to_s end end # # Queries the `HINFO` record for the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::IN::HINFO, nil] # The `HINFO` DNS record or `nil` if the host name has no `HINFO` # record. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/HINFO # def dns_get_hinfo_record(name) dns_get_record(name,:hinfo) end # # Queries the first `A` record belonging to the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::IN::A, nil] # The first `A` DNS record or `nil` if the host name has no `A` # records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/A # def dns_get_a_record(name) dns_get_record(name,:a) end # # Queries the first IPv4 address belonging to the host name. # # @param [String] name # The host name to query. # # @return [String, nil] # The first IPv4 address belonging to the host name. # def dns_get_a_address(name) if (record = dns_get_a_record(name)) record.address.to_s end end # # Queries all `A` records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All of the `A` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/A # def dns_get_a_records(name) dns_get_records(name,:a) end # # Queries all IPv4 addresses belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All of the IPv4 addresses belonging to the host name. # def dns_get_a_addresses(name) dns_get_a_records(name).map do |record| record.address.to_s end end # # Queries the first `AAAA` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::IN::AAAA, nil] # The first `AAAA` DNS record or `nil` if the host name has no # `AAAA` records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/AAAA # def dns_get_aaaa_record(name) dns_get_record(name,:aaaa) end # # Queries the first IPv6 address belonging to the host name. # # @param [String] name # The host name to query. # # @return [String, nil] # The first IPv6 address or `nil` if the host name has no IPv6 # addresses. # def dns_get_aaaa_address(name) if (record = dns_get_aaaa_record(name)) record.address.to_s end end # # Queries all `AAAA` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All of the `AAAA` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/AAAA # def dns_get_aaaa_records(name) dns_get_records(name,:aaaa) end # # Queries all IPv6 addresses belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All IPv6 addresses belonging to the host name. # def dns_get_aaaa_addresses(name) dns_get_aaaa_records(name).map do |record| record.address.to_s end end # # Queries all `SRV` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All `SRV` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/SRV # def dns_get_srv_records(name) dns_get_records(name,:srv) end # # Queries all `WKS` (Well-Known-Service) DNS records belonging to the # host name. # # @param [String] name # The host name to query. # # @return [Array] # All `WKS` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/IN/WKS # def dns_get_wks_records(name) dns_get_records(name,:wks) end # # Queries the `LOC` (Location) DNS record of the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::LOC, nil] # The `LOC` DNS record of the host name or `nil` if the host name # has no `LOC` record. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/LOC # def dns_get_loc_record(name) dns_get_record(name,:loc) end # # Queries the `MINFO` (Machine-Info) DNS record of the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::MINFO, nil] # The `MINFO` DNS record of the host name or `nil` if the host name # has no `MINFO` record. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/MINFO # def dns_get_minfo_record(name) dns_get_record(name,:minfo) end # # Queries all `MX` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All `MX` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/MX # def dns_get_mx_records(name) dns_get_records(name,:mx) end # # Queries the mailservers for the host name. # # @param [String] name # The host name to query. # # @return [Array] # The host names of the mailservers serving the given host name. # def dns_get_mailservers(name) dns_get_mx_records(name).map do |record| record.exchange.to_s end end # # Queries all `NS` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All `NS` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/NS # def dns_get_ns_records(name) dns_get_records(name,:ns) end # # Queries the nameservers for the host name. # # @param [String] name # The host name to query. # # @return [Array] # The host names of the nameservers serving the given host name. # def dns_get_nameservers(name) dns_get_ns_records(name).map do |record| record.name.to_s end end # # Queries the first `PTR` DNS record for the IP address. # # @param [String] ip # The IP address to query. # # @return [Resolv::DNS::Resource::PTR, nil] # The first `PTR` DNS record of the host name or `nil` if the host # name has no `PTR` records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/PTR # def dns_get_ptr_record(ip) dns_get_record(ip,:ptr) end # # Queries the `PTR` host name for the IP address. # # @param [String] ip # The IP address to query. # # @return [String, nil] # The host name that points to the given IP. # def dns_get_ptr_name(ip) if (record = dns_get_ptr_record(ip)) record.name.to_s end end # # Queries all `PTR` DNS records for the IP address. # # @param [String] ip # The IP address to query. # # @return [Array] # All `PTR` DNS records for the given IP. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/PTR # def dns_get_ptr_records(ip) in_addr = IPAddr.new(ip).reverse dns_get_records(in_addr,:ptr) end # # Queries all `PTR` names for the IP address. # # @param [String] ip # The IP address to query. # # @return [Array] # The `PTR` names for the given IP. # def dns_get_ptr_names(ip) dns_get_ptr_records(ip).map do |record| record.name.to_s end end # # Queries the first `SOA` DNS record belonging to the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::SOA, nil] # The first `SOA` DNS record for the host name or `nil` if the host # name has no `SOA` records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/SOA # def dns_get_soa_record(name) dns_get_record(name,:soa) end # # Queiries the first `TXT` DNS record belonging to the host name. # # @param [String] name # The host name to query. # # @return [Resolv::DNS::Resource::TXT, nil] # The first `TXT` DNS record for the host name or `nil` if the host # name has no `TXT` records. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/TXT # def dns_get_txt_record(name) dns_get_record(name,:txt) end # # Queries the first `TXT` string belonging to the host name. # # @param [String] name # The host name to query. # # @return [String, nil] # The first `TXT` string belonging to the host name or `nil` if the # host name has no `TXT` records. # def dns_get_txt_string(name) if (record = dns_get_txt_record(name)) record.strings.join end end # # Queries all `TXT` DNS records belonging to the host name. # # @param [String] name # The host name to query. # # @return [Array] # All of the `TXT` DNS records belonging to the host name. # # @see https://rubydoc.info/stdlib/resolv/Resolv/DNS/Resource/TXT # def dns_get_txt_records(name) dns_get_records(name,:txt) end # # Queries all of the `TXT` string values of the host name. # # @param [String] name # The host name to query. # # @return [Array] # All `TXT` string values belonging of the host name. # def dns_get_txt_strings(name) dns_get_txt_records(name).map do |record| record.strings.join end end end end end end