{"id":820,"date":"2012-05-24T11:08:43","date_gmt":"2012-05-24T03:08:43","guid":{"rendered":"http:\/\/notes.zerobox.org\/?p=820"},"modified":"2012-05-24T11:08:43","modified_gmt":"2012-05-24T03:08:43","slug":"%e9%9d%9e%e5%b8%b8%e7%ae%80%e5%8d%95%e7%9a%84dns%e4%bf%a1%e6%81%af%e6%b3%84%e6%bc%8f%e6%a3%80%e6%b5%8b","status":"publish","type":"post","link":"http:\/\/zerobox.org\/notes\/820.html","title":{"rendered":"\u975e\u5e38\u7b80\u5355\u7684DNS\u4fe1\u606f\u6cc4\u6f0f\u68c0\u6d4b"},"content":{"rendered":"

\u6765\u6e90\uff1ahttp:\/\/hi.baidu.com\/cnqing\/blog\/item\/d21db78e391d50cef11f364a.html<\/a><\/p>\n

using System;<\/p>\n

using System.Collections.Generic;<\/p>\n

using System.Text;<\/p>\n

using System.Text.RegularExpressions;<\/p>\n

using System.Collections;<\/p>\n

using System.IO;<\/p>\n

using System.Net.Sockets;<\/p>\n

class Program<\/p>\n

static void Main(string[] args)<\/p>\n

string domain = args[0];<\/p>\n

Whois wis = new Whois();<\/p>\n

string result = wis.LookUp(domain);<\/p>\n

Regex reg = new Regex(“name\\\\sserver:(.*)”, RegexOptions.IgnoreCase);<\/p>\n

MatchCollection mcs = reg.Matches(result);<\/p>\n

#region \u8f7b\u91cf\u7684DNS\u534f\u8bae\u5305<\/p>\n

string name = domain.Substring(0, domain.LastIndexOf(“.”));<\/p>\n

string suffix = domain.Substring(domain.LastIndexOf(“.”) + 1);<\/p>\n

byte[] namedata = System.Text.ASCIIEncoding.ASCII.GetBytes(name);<\/p>\n

byte[] suffixdata = System.Text.ASCIIEncoding.ASCII.GetBytes(suffix);<\/p>\n

int totallen = 14 + namedata.Length + suffixdata.Length + 7;<\/p>\n

byte[] dnslisarray = new byte[totallen];<\/p>\n

dnslisarray[1] = 0x00;<\/p>\n

dnslisarray[2] = 0x01;<\/p>\n

dnslisarray[5] = 0x01;<\/p>\n

dnslisarray[12] = (byte)(namedata.Length);<\/p>\n

namedata.CopyTo(dnslisarray, 13);<\/p>\n

dnslisarray[13 + namedata.Length] = (byte)suffixdata.Length;<\/p>\n

suffixdata.CopyTo(dnslisarray, 14 + namedata.Length);<\/p>\n

dnslisarray[14 + namedata.Length + suffixdata.Length + 2] = 0xFC;<\/p>\n

dnslisarray[14 + namedata.Length + suffixdata.Length + 4] = 0x01;<\/p>\n

dnslisarray[14 + namedata.Length + suffixdata.Length + 5] = 0x4D;<\/p>\n

dnslisarray[14 + namedata.Length + suffixdata.Length + 6] = 0x53;<\/p>\n

#endregion<\/p>\n

bool ishavevul = false;<\/p>\n

foreach (Match item in mcs)<\/p>\n

if (ishavevul) break ;<\/p>\n

System.Net.Sockets.TcpClient t = new System.Net.Sockets.TcpClient();<\/p>\n

Console.Write(“checking dns ” + item.Groups[1].Value.Trim());<\/p>\n

t.Connect(item.Groups[1].Value.Trim(), 53);<\/p>\n

t.Client.Send(new byte[] { 0x0, (byte)totallen });<\/p>\n

byte[] buf = new byte[1024];<\/p>\n

t.Client.Send(dnslisarray);<\/p>\n

buf = new byte[16];<\/p>\n

int len = t.Client.Receive(buf);<\/p>\n

t.Close();<\/p>\n

if (buf.Length > 8 && buf[9] > 0)<\/p>\n

ishavevul = true;<\/p>\n

Console.Write(“\\t find more than ” + buf[9] + ” answers\\r\\n”);<\/p>\n

Console.Write(“\\t refuse list\\r\\n”);<\/p>\n

if (!ishavevul)<\/p>\n

Console.WriteLine( args[0] + ” is safe”);<\/p>\n

Console.WriteLine( args[0] + ” is not safe”);<\/p>\n

}<\/p>\n","protected":false},"excerpt":{"rendered":"

\u6765\u6e90\uff1ahttp:\/\/hi.baidu.com\/cnqing\/blog\/item\/ …<\/p>\n

\u7ee7\u7eed\u9605\u8bfb »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[195],"class_list":["post-820","post","type-post","status-publish","format-standard","hentry","tag-dns"],"views":966,"_links":{"self":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/820","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/comments?post=820"}],"version-history":[{"count":0,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/820\/revisions"}],"wp:attachment":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/media?parent=820"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/categories?post=820"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/tags?post=820"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}