2020-12-24 20:54:55 +00:00
|
|
|
package dns
|
|
|
|
|
|
|
|
import (
|
2021-10-30 10:17:47 +00:00
|
|
|
"encoding/hex"
|
2020-12-24 20:54:55 +00:00
|
|
|
"net/url"
|
|
|
|
|
|
|
|
"github.com/pkg/errors"
|
2021-09-29 16:43:46 +00:00
|
|
|
|
2020-12-24 20:54:55 +00:00
|
|
|
"github.com/projectdiscovery/gologger"
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/output"
|
2020-12-25 15:09:09 +00:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols"
|
2021-10-12 17:06:55 +00:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/expressions"
|
2021-10-01 13:52:38 +00:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/helpers/eventcreator"
|
2021-10-01 11:24:45 +00:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/helpers/responsehighlighter"
|
2021-11-03 14:23:45 +00:00
|
|
|
templateTypes "github.com/projectdiscovery/nuclei/v2/pkg/templates/types"
|
2020-12-24 20:54:55 +00:00
|
|
|
)
|
|
|
|
|
2020-12-25 15:09:09 +00:00
|
|
|
var _ protocols.Request = &Request{}
|
|
|
|
|
2021-11-03 14:23:45 +00:00
|
|
|
// Type returns the type of the protocol request
|
|
|
|
func (request *Request) Type() templateTypes.ProtocolType {
|
|
|
|
return templateTypes.DNSProtocol
|
|
|
|
}
|
|
|
|
|
2020-12-24 20:54:55 +00:00
|
|
|
// ExecuteWithResults executes the protocol requests and returns results instead of writing them.
|
2021-10-01 11:30:04 +00:00
|
|
|
func (request *Request) ExecuteWithResults(input string, metadata /*TODO review unused parameter*/, previous output.InternalEvent, callback protocols.OutputEventCallback) error {
|
2020-12-24 20:54:55 +00:00
|
|
|
// Parse the URL and return domain if URL.
|
|
|
|
var domain string
|
|
|
|
if isURL(input) {
|
|
|
|
domain = extractDomain(input)
|
|
|
|
} else {
|
|
|
|
domain = input
|
|
|
|
}
|
|
|
|
|
|
|
|
// Compile each request for the template based on the URL
|
2021-10-01 11:30:04 +00:00
|
|
|
compiledRequest, err := request.Make(domain)
|
2020-12-24 20:54:55 +00:00
|
|
|
if err != nil {
|
2021-10-30 09:55:02 +00:00
|
|
|
request.options.Output.Request(request.options.TemplatePath, domain, "dns", err)
|
2021-10-01 11:30:04 +00:00
|
|
|
request.options.Progress.IncrementFailedRequestsBy(1)
|
2021-01-01 14:06:21 +00:00
|
|
|
return errors.Wrap(err, "could not build request")
|
2020-12-24 20:54:55 +00:00
|
|
|
}
|
|
|
|
|
2021-10-07 14:08:31 +00:00
|
|
|
requestString := compiledRequest.String()
|
2021-10-07 14:10:16 +00:00
|
|
|
if varErr := expressions.ContainsUnresolvedVariables(requestString); varErr != nil {
|
2021-10-11 10:58:20 +00:00
|
|
|
gologger.Warning().Msgf("[%s] Could not make dns request for %s: %v\n", request.options.TemplateID, domain, varErr)
|
2021-10-07 14:08:31 +00:00
|
|
|
return nil
|
|
|
|
}
|
2021-10-01 11:30:04 +00:00
|
|
|
if request.options.Options.Debug || request.options.Options.DebugRequests {
|
|
|
|
gologger.Info().Str("domain", domain).Msgf("[%s] Dumped DNS request for %s", request.options.TemplateID, domain)
|
2021-10-07 14:08:31 +00:00
|
|
|
gologger.Print().Msgf("%s", requestString)
|
2020-12-24 20:54:55 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// Send the request to the target servers
|
2021-10-30 10:17:47 +00:00
|
|
|
response, err := request.dnsClient.Do(compiledRequest)
|
2020-12-24 20:54:55 +00:00
|
|
|
if err != nil {
|
2021-10-30 09:55:02 +00:00
|
|
|
request.options.Output.Request(request.options.TemplatePath, domain, "dns", err)
|
2021-10-01 11:30:04 +00:00
|
|
|
request.options.Progress.IncrementFailedRequestsBy(1)
|
2021-03-13 19:31:32 +00:00
|
|
|
}
|
2021-10-30 10:17:47 +00:00
|
|
|
if response == nil {
|
2021-01-01 14:06:21 +00:00
|
|
|
return errors.Wrap(err, "could not send dns request")
|
2020-12-24 20:54:55 +00:00
|
|
|
}
|
2021-10-01 11:30:04 +00:00
|
|
|
request.options.Progress.IncrementRequests()
|
2020-12-25 15:03:52 +00:00
|
|
|
|
2021-10-30 09:55:02 +00:00
|
|
|
request.options.Output.Request(request.options.TemplatePath, domain, "dns", err)
|
2021-10-30 10:17:47 +00:00
|
|
|
gologger.Verbose().Msgf("[%s] Sent DNS request to %s\n", request.options.TemplateID, domain)
|
2020-12-24 20:54:55 +00:00
|
|
|
|
2021-10-30 10:17:47 +00:00
|
|
|
outputEvent := request.responseToDSLMap(compiledRequest, response, input, input)
|
2021-01-16 08:40:24 +00:00
|
|
|
for k, v := range previous {
|
|
|
|
outputEvent[k] = v
|
|
|
|
}
|
2020-12-24 20:54:55 +00:00
|
|
|
|
2021-10-12 17:06:55 +00:00
|
|
|
event := eventcreator.CreateEvent(request, outputEvent, request.options.Options.Debug || request.options.Options.DebugResponse)
|
2021-10-01 11:24:45 +00:00
|
|
|
|
2021-10-30 10:17:47 +00:00
|
|
|
debug(event, request, domain, response.String())
|
2021-09-29 16:43:46 +00:00
|
|
|
|
|
|
|
callback(event)
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2021-10-30 10:17:47 +00:00
|
|
|
func debug(event *output.InternalWrappedEvent, request *Request, domain string, response string) {
|
|
|
|
if request.options.Options.Debug || request.options.Options.DebugResponse {
|
|
|
|
gologger.Debug().Msgf("[%s] Dumped DNS response for %s\n", request.options.TemplateID, domain)
|
|
|
|
|
|
|
|
hexDump := false
|
|
|
|
if !responsehighlighter.IsASCII(response) {
|
|
|
|
hexDump = true
|
|
|
|
response = hex.Dump([]byte(response))
|
|
|
|
}
|
|
|
|
gologger.Print().Msgf("%s", responsehighlighter.Highlight(event.OperatorsResult, response, request.options.Options.NoColor, hexDump))
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2020-12-24 20:54:55 +00:00
|
|
|
// isURL tests a string to determine if it is a well-structured url or not.
|
|
|
|
func isURL(toTest string) bool {
|
2021-08-31 09:55:52 +00:00
|
|
|
if _, err := url.ParseRequestURI(toTest); err != nil {
|
2020-12-24 20:54:55 +00:00
|
|
|
return false
|
|
|
|
}
|
|
|
|
u, err := url.Parse(toTest)
|
|
|
|
if err != nil || u.Scheme == "" || u.Host == "" {
|
|
|
|
return false
|
|
|
|
}
|
|
|
|
return true
|
|
|
|
}
|
|
|
|
|
|
|
|
// extractDomain extracts the domain name of a URL
|
|
|
|
func extractDomain(theURL string) string {
|
|
|
|
u, err := url.Parse(theURL)
|
|
|
|
if err != nil {
|
|
|
|
return ""
|
|
|
|
}
|
|
|
|
return u.Hostname()
|
|
|
|
}
|