コード例 #1
0
        private DnsQueryRequest ParseQuery(ref MemoryStream ms)
        {
            DnsQueryRequest queryRequest = new DnsQueryRequest();

            // Read name
            queryRequest.Name = DnsRecordBase.ParseName(ref ms);
            return(queryRequest);
        }
コード例 #2
0
        private static List <DnsRecordBase> GetPowerShellRecords <T>(IList <T> mamlObjects) where T : class
        {
            var result = new List <DnsRecordBase>();

            if (mamlObjects == null || mamlObjects.Count == 0)
            {
                return(result);
            }

            return(mamlObjects.Select(mamlObject => DnsRecordBase.FromMamlRecord(mamlObject)).ToList());
        }
コード例 #3
0
        private static List <DnsRecordBase> GetPowerShellRecords(Management.Dns.Models.RecordSet recordSet)
        {
            var result = new List <DnsRecordBase>();

            result.AddRange(GetPowerShellRecords(recordSet.Properties.AaaaRecords));
            result.AddRange(GetPowerShellRecords(recordSet.Properties.ARecords));
            result.AddRange(GetPowerShellRecords(recordSet.Properties.MxRecords));
            result.AddRange(GetPowerShellRecords(recordSet.Properties.NsRecords));
            result.AddRange(GetPowerShellRecords(recordSet.Properties.SrvRecords));
            result.AddRange(GetPowerShellRecords(recordSet.Properties.TxtRecords));
            if (recordSet.Properties.CnameRecord != null)
            {
                result.Add(DnsRecordBase.FromMamlRecord(recordSet.Properties.CnameRecord));
            }
            if (recordSet.Properties.SoaRecord != null)
            {
                result.Add(DnsRecordBase.FromMamlRecord(recordSet.Properties.SoaRecord));
            }

            return(result);
        }
コード例 #4
0
ファイル: DnsMessageBase.cs プロジェクト: zhuyue1314/Xploit
        private static DnsRecordBase ParseRecord(byte[] resultData, ref int currentPosition)
        {
            int startPosition = currentPosition;

            string        name       = ParseDomainName(resultData, ref currentPosition);
            RecordType    recordType = (RecordType)ParseUShort(resultData, ref currentPosition);
            DnsRecordBase record     = DnsRecordBase.Create(recordType, resultData, currentPosition + 6);

            record.StartPosition    = startPosition;
            record.Name             = name;
            record.RecordType       = recordType;
            record.RecordClass      = (RecordClass)ParseUShort(resultData, ref currentPosition);
            record.TimeToLive       = ParseInt(resultData, ref currentPosition);
            record.RecordDataLength = ParseUShort(resultData, ref currentPosition);

            if (record.RecordDataLength > 0)
            {
                record.ParseRecordData(resultData, currentPosition, record.RecordDataLength);
                currentPosition += record.RecordDataLength;
            }

            return(record);
        }
コード例 #5
0
		/// <summary>
		///   Creates a new instance of the AddRecordUpdate
		/// </summary>
		/// <param name="record"> Record which should be added </param>
		public AddRecordUpdate(DnsRecordBase record)
			: base(record.Name, record.RecordType, record.RecordClass, record.TimeToLive)
		{
			Record = record;
		}
コード例 #6
0
 /// <summary>
 ///   Creates a new instance of the DeleteRecordUpdate class
 /// </summary>
 /// <param name="record"> Record that should be deleted </param>
 public DeleteRecordUpdate(DnsRecordBase record)
     : base(record.Name, record.RecordType, RecordClass.None, 0)
 {
     Record = record;
 }
コード例 #7
0
 /// <summary>
 ///   Creates a new instance of the RecordExistsPrequisite class
 /// </summary>
 /// <param name="record"> tecord that should be checked </param>
 public RecordExistsPrequisite(DnsRecordBase record)
     : base(record.Name, record.RecordType, record.RecordClass, 0)
 {
     Record = record;
 }
コード例 #8
0
        private static void LogMultiResolverLog(Stopwatch stopwatch, ILogger <IDnsCtx> logger, IDnsCtx dnsContext, int i, int count, DnsRecordBase dnsRecordBase)
        {
            var messageTemplate = "ClientIpAddress: {0} resolve[{1}/{2}] {3} => {4} ({5}, {6}) after [{7} ms]";

            if (dnsRecordBase is CNameRecord cNameRecord)
            {
                logger.LogDebug(messageTemplate,
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                cNameRecord.Name.ToString(),
                                cNameRecord.CanonicalName.ToString(),
                                cNameRecord.RecordType.ToString(),
                                cNameRecord.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
            else if (dnsRecordBase is ARecord aRecord)
            {
                logger.LogDebug(messageTemplate,
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                aRecord.Name.ToString(),
                                aRecord.Address.ToString(),
                                aRecord.RecordType.ToString(),
                                aRecord.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
            else if (dnsRecordBase is AaaaRecord aaaaRecord)
            {
                logger.LogDebug(messageTemplate,
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                aaaaRecord.Name.ToString(),
                                aaaaRecord.Address.ToString(),
                                aaaaRecord.RecordType.ToString(),
                                aaaaRecord.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
            else if (dnsRecordBase is PtrRecord ptrRecord)
            {
                logger.LogDebug(messageTemplate,
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                ptrRecord.Name.ToString(),
                                ptrRecord.PointerDomainName.ToString(),
                                ptrRecord.RecordType.ToString(),
                                ptrRecord.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
            else if (dnsRecordBase is MxRecord mxRecord)
            {
                logger.LogDebug(messageTemplate,
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                mxRecord.Name.ToString(),
                                mxRecord.ExchangeDomainName.ToString(),
                                mxRecord.RecordType.ToString(),
                                mxRecord.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
            else
            {
                logger.LogDebug("ClientIpAddress: {0} resolve[{1}/{2}] {3} ({4}, {5}) after [{6} ms]",
                                dnsContext?.IpEndPoint,
                                i,
                                count,
                                dnsRecordBase.Name.ToString(),
                                dnsRecordBase.RecordType.ToString(),
                                dnsRecordBase.RecordClass.ToString(),
                                stopwatch.ElapsedMilliseconds);
            }
        }
コード例 #9
0
 /// <summary>
 /// Creates a new instance of the DeleteRecordUpdate class.
 /// </summary>
 /// <param name="record">Record that should be deleted.</param>
 public DeleteRecordUpdate(DnsRecordBase record)
     : base(record.Name, record.RecordType, RecordClass.None, 0)
 {
     this.Record = record;
 }
コード例 #10
0
 /// <summary>
 ///   Creates a new instance of the AddRecordUpdate
 /// </summary>
 /// <param name="record"> Record which should be added </param>
 public AddRecordUpdate(DnsRecordBase record)
     : base(record.Name, record.RecordType, record.RecordClass, record.TimeToLive)
 {
     Record = record;
 }
コード例 #11
0
		/// <summary>
		///   Creates a new instance of the RecordExistsPrequisite class
		/// </summary>
		/// <param name="record"> tecord that should be checked </param>
		public RecordExistsPrequisite(DnsRecordBase record)
			: base(record.Name, record.RecordType, record.RecordClass, 0)
		{
			Record = record;
		}
コード例 #12
0
        } // End Class DbDnsRecord


        static async Task <bool> ResolveMessage(DnsMessage query, QueryReceivedEventArgs e, DnsMessage response)
        {
            DbDnsRecord rec = null;

            using (System.Data.Common.DbCommand cmd = s_sql.CreateCommand(@"
-- DECLARE @in_recordType int 
-- DECLARE @in_recordName varchar(4000) 

-- SET @in_recordType = 1 -- A 
-- SET @in_recordName = 'vortex.data.microsoft.com' 


SELECT 
	 REC_Id
	--,T_Records.REC_DOM_Id
	,T_Records.REC_RT_Id
	,T_Records.REC_Name
	,T_Records.REC_Content
	,T_Records.REC_ResponsibleName
	,COALESCE(T_Records.REC_TTL, 100) AS REC_TTL 
	,T_Records.REC_Prio
	,T_Records.REC_Weight
	,T_Records.REC_Port
	,T_Records.REC_SerialNumber
	,T_Records.REC_RefreshInterval
	,T_Records.REC_RetryInterval
	,T_Records.REC_ExpireInterval
	,T_Records.REC_NegativeCachingTTL
	,T_Records.REC_AfsSubType
	,T_Records.REC_ChangeDate
FROM T_Records 
WHERE REC_RT_Id	= @in_recordType 
AND T_Records.REC_Name = @in_recordName 
;
"))
            {
                try
                {
                    string name = query.Questions[0].Name.ToString();

                    s_sql.AddParameter(cmd, "in_recordType", (int)query.Questions[0].RecordType);
                    s_sql.AddParameter(cmd, "in_recordName", name);

                    // TODO: Can return multiple records...
                    rec = s_sql.GetClass <DbDnsRecord>(cmd);
                }
                catch (System.Exception ex)
                {
                    System.Console.WriteLine(ex.Message);
                    System.Console.WriteLine(ex.StackTrace);
                }
            } // End Using cmd

            if (rec != null)
            {
                int ttl = 3600;

                DnsRecordBase record = null;

                // https://blog.dnsimple.com/2015/04/common-dns-records/
                // https://en.wikipedia.org/wiki/List_of_DNS_record_types
                switch ((RecordType)rec.REC_RT_Id)
                {
                case RecordType.Soa:
                    // SoaRecord(DomainName name, int timeToLive, DomainName masterName
                    //  , DomainName responsibleName, uint serialNumber, int refreshInterval
                    //  , int retryInterval, int expireInterval, int negativeCachingTTL)
                    record = new ARSoft.Tools.Net.Dns.SoaRecord(
                        DomainName.Parse(rec.REC_Name)
                        , rec.REC_TTL.Value
                        , DomainName.Parse(rec.REC_Content)
                        , DomainName.Parse(rec.REC_ResponsibleName)
                        , rec.REC_SerialNumber.Value
                        , rec.REC_RefreshInterval.Value
                        , rec.REC_RetryInterval.Value
                        , rec.REC_ExpireInterval.Value
                        , rec.REC_NegativeCachingTTL.Value
                        );
                    break;

                case RecordType.Ns:
                    record = new ARSoft.Tools.Net.Dns.NsRecord(DomainName.Parse(rec.REC_Name), ttl, DomainName.Parse(rec.REC_Content));
                    break;

                case RecordType.Srv:
                    // SrvRecord(DomainName name, int timeToLive, ushort priority, ushort weight, ushort port, DomainName target)
                    record = new ARSoft.Tools.Net.Dns.SrvRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, (ushort)rec.REC_Prio.Value, (ushort)rec.REC_Weight.Value, (ushort)rec.REC_Port.Value, DomainName.Parse(rec.REC_Content));
                    break;

                // https://www.openafs.org/
                // https://en.wikipedia.org/wiki/OpenAFS
                // http://www.rjsystems.nl/en/2100-dns-discovery-openafs.php
                // OpenAFS is an open source implementation of the Andrew distributed file system(AFS).
                case RecordType.Afsdb:
                    // http://www.rjsystems.nl/en/2100-dns-discovery-openafs.php

                    record = new ARSoft.Tools.Net.Dns.AfsdbRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, (AfsdbRecord.AfsSubType)(uint) rec.REC_AfsSubType.Value, DomainName.Parse(rec.REC_Content));
                    break;

                // A DNS-based Authentication of Named Entities (DANE) method
                // for publishing and locating OpenPGP public keys in DNS
                // for a specific email address using an OPENPGPKEY DNS resource record.
                case RecordType.OpenPGPKey:
                    byte[] publicKey = null;

                    // hexdump(sha256(truncate(utf8(ocalpart), 28)
                    // https://www.huque.com/bin/openpgpkey
                    // The OPENPGPKEY DNS record is specied in RFC 7929.
                    // The localpart of the uid is encoded as a DNS label
                    // containing the hexdump of the SHA-256 hash
                    // of the utf-8 encoded localpart, truncated to 28 octets.
                    // Normally the "Standard" output format should be used.
                    // The "Generic Encoding" output format is provided to help work
                    // with older DNS software that does not yet understand the OPENPGPKEY record type.
                    record = new ARSoft.Tools.Net.Dns.OpenPGPKeyRecord(DomainName.Parse(rec.REC_Name), ttl, publicKey);
                    break;

                // Canonical name records, or CNAME records, are often called alias records because they map an alias to the canonical name. When a name server finds a CNAME record, it replaces the name with the canonical name and looks up the new name.
                case RecordType.CName:
                    record = new ARSoft.Tools.Net.Dns.CNameRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, DomainName.Parse(rec.REC_Content));
                    break;

                case RecordType.Ptr:
                    record = new ARSoft.Tools.Net.Dns.PtrRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, DomainName.Parse(rec.REC_Content));
                    break;

                case RecordType.A:
                    record = new ARSoft.Tools.Net.Dns.ARecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, System.Net.IPAddress.Parse(rec.REC_Content));
                    break;

                case RecordType.Aaaa:
                    record = new ARSoft.Tools.Net.Dns.AaaaRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, System.Net.IPAddress.Parse(rec.REC_Content));
                    break;

                case RecordType.Mx:
                    record = new ARSoft.Tools.Net.Dns.MxRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, 0, DomainName.Parse(rec.REC_Content));
                    break;

                case RecordType.Txt:
                    record = new ARSoft.Tools.Net.Dns.TxtRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, rec.REC_Content);
                    break;

                case RecordType.SshFp:
                    // https://unix.stackexchange.com/questions/121880/how-do-i-generate-sshfp-records

                    // SshFpRecord(DomainName name, int timeToLive, SshFpAlgorithm algorithm
                    //     , SshFpFingerPrintType fingerPrintType, byte[] fingerPrint)
                    ARSoft.Tools.Net.Dns.SshFpRecord.SshFpAlgorithm sfa = ARSoft.Tools.Net.Dns.SshFpRecord
                                                                          .SshFpAlgorithm.Rsa;

                    ARSoft.Tools.Net.Dns.SshFpRecord.SshFpFingerPrintType sfp = ARSoft.Tools.Net.Dns.SshFpRecord
                                                                                .SshFpFingerPrintType.Sha256;

                    byte[] fp = null;

                    record = new ARSoft.Tools.Net.Dns.SshFpRecord(DomainName.Parse(rec.REC_Name), rec.REC_TTL.Value, sfa, sfp, fp);
                    break;

                default:
                    break;
                } // End Switch

                if (record != null)
                {
                    response.AnswerRecords.Add(record);
                }

                response.ReturnCode = ReturnCode.NoError;
                e.Response          = response;
                return(await Task <bool> .FromResult(true));
            } // End if (rec != null)

            return(await Task <bool> .FromResult(false));
        } // End Function ResolveMessage