Paid Advertising
<?
# Partly ported piece from Fierce.pl by RSnake.
# Dirty Record lookup.
# script settings:
error_reporting(0);
ini_set("max_execution_time",0);
function QP($host,$wc) {
# Fierce cards, with few added by myself.
$records = array("mirror","database","phpmyadmin","scrape","scraper","torrent",
"webcam","cam","warez","uploads","usenet","config","httpt","ssl","ssh","hidden",
"web","docs","pub","home","jobs","careers","my","public","pub","ir","investor",
"investors","images","img","img01","img02","include","media","static","cdn",
"akamai","ssl","ssl1","ssl01","cache","video","videos","ftp","ajax","xml","mobile",
"wap","sms","isync","cgi","members","login","signin","signup","online","tcl",
"apache","iis","zeus","websphere","domino","search","download","downloads",
"news","support","forum","forums","about","help","helpdesk","en","us","uk","de",
"internal","intl","intranet","www-int","int","corp","mgmt","management","sales",
"marketing","billing","it","eng","eng1","eng01","engineering","ops","ops1","ops01",
"ops2","ops02","operations","dev","dev1","dev01","stage","staging","development",
"pr","test","lab","labs","qa","employees","go","start","tool","tools","problemtracker",
"tracker","bug","bugs","bugzilla","subversion","sv","cvs","rcs","dhcp","ups","irc",
"talk","chat","voip","homebase","call","ms","owa","owa01","outlook","webmail","mail",
"email","strongmail","antivirus","av","spam","smtp","pop","hr","humanresources",
"sharepoint","blog","blogs","wordpress","drupal","rss","cms","wiki","vantive",
"db","db1","db01","db2","db02","mysql","mysql1","mysql01","sql","sql1","sql01",
"mssql","mssql1","mssql01","ldap","oracle","peoplesoft","siebel","crm","erp",
"customer","customers","dns","nameserv","a.auth-ns","b.auth-ns","c.auth-ns","ix",
"mx","mtu","mta","ns","ns1","ns01","ns2","ns02","ns3","ns4","ns5","rtr","rtr1",
"rtr01","att","mci","sprint","router","core","proxy","r1","r01","r2","r02","core01",
"sw","sw1","s1","s2","sw01","cisco","juniper","f5","lb","squid","checkpoint",
"foundry","wireless","ap","wlan","lan","nokia","netgear","netscreen","arcsight",
"citrix","vnc","netscaler","toplayer","opsware","ops","netapp","app","app1",
"app01","nms","nas","san","esm","ism","tivoli","openview","ov","hpov","cricket",
"flow","mrtg","log","log1","log01","log2","log02","logs","syslog","syslogs",
"ias","webstats","analyzer","xlogan","logfile","logfiles","webalizer","alterwind",
"activestat","clicktrack","webtrends","faststats","urchin","z-log","zlog","wusage",
"keynote","stat","stats","remstats","monitoring","splunk","vpn","vpn1","vpn01",
"vpn2","vpn02","connect","outside","inside","snort","ids","cims","sim","fs",
"gw","concentrator","con","console","honeypot","ad","mom","id","sec","securid",
"fwsm","fwsm1","fwsm01","fw","fw1","dialup","dmz","sun","sun1","sun01","sun2",
"sun02","bsd","freebsd","freebsd1","freebsd01","freebsd2","freebsd02","linux",
"linux1","linux01","linux2","linux02","win","win1","win01","win2","win02",
"windows","windows1","windows01","windows2","windows02","quake","counterstrike",
"halflife","mp3");
echo "<b>Hosts found:</b><br />";
foreach($records as $rec){
if(checkdnsrr($rec.$host.'.','A')) {
# spit results.
echo $rec.'.'.$host."<br />";
}
}
# Wildcard canonical names
if($wc) {
echo "<b>Wildcards found:</b><br />";
for($a=0;$a<16;$a++){
if(checkdnsrr('ww'.$a.'.'.$host.'.','A')) {
# wwX results.
echo "ww".$a.'.'.$host."<br />";
}
}
for($b=0;$b<16;$b++){
if(checkdnsrr('www'.$b.'.'.$host.'.','A')) {
# wwwXresults.
echo "www".$b.'.'.$host."<br />";
}
}
for($c=0;$c<16;$c++){
if(checkdnsrr('bsd'.$c.'.'.$host.'.','A')) {
# bsdXresults.
echo "bsd".$c.'.'.$host."<br />";
}
}
for($d=0;$d<16;$d++){
if(checkdnsrr('a'.$d.'.'.$host.'.','A')) {
# aXresults.
echo "a".$d.'.'.$host."<br />";
}
}
for($e=0;$e<16;$e++){
if(checkdnsrr('b'.$e.'.'.$host.'.','A')) {
# bXresults.
echo "b".$e.'.'.$host."<br />";
}
}
for($f=0;$f<16;$f++){
if(checkdnsrr('mysql'.$f.'.'.$host.'.','A')) {
# mysqlXresults.
echo "mysql".$f.'.'.$host."<br />";
}
}
for($g=0;$g<16;$g++){
if(checkdnsrr('proxy'.$g.'.'.$host.'.','A')) {
# proxyXresults.
echo "proxy".$g.'.'.$host."<br />";
}
}
}
}
# example
# host, wildcards true or leave empty
QP("google.com","true");
?>
