69 lines
2.3 KiB
Python
69 lines
2.3 KiB
Python
import socket
|
|
import ssl
|
|
import dns.message
|
|
import dns.query
|
|
import dns.rcode
|
|
import argparse
|
|
import ipaddress
|
|
|
|
def do53_query(name,type):
|
|
query = dns.message.make_query(qname=name, rdtype=type)
|
|
response_message = dns.query.udp(q=query, port=53, where='127.0.0.54', timeout=5)
|
|
print(f'本地do53解析域名{name}的{type}记录:\n{response_message}')
|
|
|
|
|
|
def p1(dot,mode,name,type):
|
|
print(f'========Phase 1: 解析获取DoT服务器的IP地址========')
|
|
query = dns.message.make_query(qname=dot, rdtype='A')
|
|
for i in range(1,4):
|
|
try:
|
|
response_message = dns.query.udp(q=query, port=53, where='127.0.0.54', timeout=5)
|
|
except:
|
|
response_message = ''
|
|
print(f'获取失败，重试{i}')
|
|
if response_message != '':
|
|
print(f'{dot} A 记录地址为 {response_message.answer[0]}')
|
|
p2(str(response_message.answer[0]).split(' ')[-1],args.mode,args.name,args.type)
|
|
else:
|
|
if mode == 'opportunistic':
|
|
print('机会隐私设置，降为明文进行查询')
|
|
do53_query(name, type)
|
|
else:
|
|
print('严格隐私设置，查询结束')
|
|
|
|
|
|
def p2(dot_ip,mode,name,type):
|
|
print(f'========Phase 2: 与DoT服务器{dot_ip}建立连接========')
|
|
query = dns.message.make_query(qname=name, rdtype=type)
|
|
for i in range(1,4):
|
|
try:
|
|
response_message = dns.query.tls(q=query, port=853, where=dot_ip, timeout=5,verify=True)
|
|
except:
|
|
response_message = ''
|
|
print(f'获取失败，重试{i}')
|
|
if response_message == '':
|
|
if mode == 'opportunistic':
|
|
print('机会隐私设置，降为明文进行查询')
|
|
do53_query(name, type)
|
|
else:
|
|
print('严格隐私设置，查询结束')
|
|
else:
|
|
print(f'解析域名{name}的{type}记录:\n{response_message}')
|
|
|
|
|
|
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument('-dot', '--dot', default='dns.alidns.com')
|
|
parser.add_argument('-mode', '--mode', default='opportunistic')
|
|
parser.add_argument('-name', '--name', default='www.baidu.com')
|
|
parser.add_argument('-type', '--type', default='A')
|
|
args = parser.parse_args()
|
|
|
|
print(f'DoT server: {args.dot}')
|
|
try:
|
|
if ipaddress.ip_address(args.dot):
|
|
p2(args.dot, args.mode, args.name, args.type)
|
|
|
|
except:
|
|
p1(args.dot,args.mode,args.name,args.type)
|