community
/
dns
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Trying to port some stuff from fpdns

This commit is contained in:
Miek Gieben 2011-09-20 20:05:37 +02:00
parent 7df6476d8f
commit 2c8dacf0c0
2 changed files with 20 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
_examples/q/dns.go
View File

@ -4,6 +4,10 @@ import (
"dns"
)
const (
QUERYNORMAL string = "QUERY,NOTZONE,qr,aa,tc,rd,ra,ad,cd,z,0,0,0,0,do,0"
)
// Check if the server responds at all
func dnsAlive(l *lexer) stateFn {
l.verbose("Alive")
@ -39,11 +43,11 @@ func dnsEDNS0Mangler(l *lexer) stateFn {
l.setString("NOTIFY,NOERROR,qr,aa,tc,RD,ra,ad,cd,z,0,0,0,0,do,0")
l.setQuestion("012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890123456789012345678901234567890.", dns.TypeA, dns.ClassINET)
f := l.probe()
// MaraDNS does not set the QR bit in the reply... but only with this question is seems
// QUERY,NOERROR,qr,aa,t
if !f.Response && f.Opcode == dns.OpcodeQuery && f.Rcode == dns.RcodeSuccess {
l.emit(&item{itemSoftware, MARADNS})
}
// MaraDNS does not set the QR bit in the reply... but only with this question is seems
// QUERY,NOERROR,qr,aa,t
if !f.Response && f.Opcode == dns.OpcodeQuery && f.Rcode == dns.RcodeSuccess {
l.emit(&item{itemSoftware, MARADNS})
}
return dnsTcEnable
}
@ -121,8 +125,16 @@ func dnsRcodeWhacky(l *lexer) stateFn {
func dnsRcodeNotZone(l *lexer) stateFn {
l.verbose("RcodeNotZone")
l.setString("QUERY,NOTZONE,qr,aa,tc,rd,ra,ad,cd,Z,0,0,0,0,do,0")
l.setString("QUERY,NOTZONE,qr,aa,tc,rd,ra,ad,cd,z,0,0,0,0,do,0")
l.setQuestion(".", dns.TypeNS, dns.ClassINET)
l.probe()
return nil
return dnsLikeWindows
}
func dnsLikeWindows(l *lexer) stateFn {
l.verbose("LikeWindows")
l.setString(QUERYNORMAL)
l.setQuestion(".", dns.TypeIXFR, dns.ClassINET)
l.probe()
return nil
}

1
_examples/q/fp.go
View File

@ -13,6 +13,7 @@ const (
// Detected software types
NSD = "NSD"
BIND = "BIND"
WINDOWSDNS = "Windows DNS"
MARADNS = "MaraDNS"
// Vendors