鬼仔's Blog

#ifdef __cplusplus
extern "C" {
#endif // __cplusplus

#include "XScanLib\XScanLib.h"

#ifdef __cplusplus
}
#endif // __cplusplus

extern "C" __declspec(dllexport) BOOL __stdcall GetPluginInfo(PLUGIN_INFO *);
extern "C" __declspec(dllexport) BOOL __stdcall PluginFunc (VOID *);
extern "C" DWORD WINAPI ResolveName (VOID *);

#pragma comment (lib, "ws2_32")
#pragma comment (lib, "XScanLib\XScanLib.lib")

#define VULN_MEMBER_NAME "反向域名解析"
#define CHECKING_STRING "正在解析域名..."
#define VERSION "0.2"
#define CMD_PARMAS "-dnsname"
#define PROMPT "反向域名解析"
#define AUTHOR "云舒"
#define DESCRIPTION "这个插件将IP地址反向解析为域名"
#define TIMEOUT 10000
#define ICON "winnt.bmp"
#define FILENAME "Dns_Name.xpn"

BOOL APIENTRY DLLMain(HANDLE hModule,DWORD ul_reason_for_call,LPVOID lpReserved)
{
return TRUE;
}

BOOL __stdcall GetPluginInfo (PLUGIN_INFO *Info)
{
strcpy( Info->szClassName, VULN_MEMBER_NAME );
strcpy( Info->szMemberName, VULN_MEMBER_NAME );
strcpy( Info->szVersion, VERSION );
strcpy( Info->szFileName, FILENAME );
strcpy( Info->szParamsRequest, CMD_PARMAS );
strcpy( Info->szPrompt, PROMPT );
Info->nSingle = 1;
strcpy( Info->szAuthorName, AUTHOR );
strcpy( Info->szDescription, DESCRIPTION );
Info->dwTimeOut = TIMEOUT;
Info->nMark = 1;
strcpy( Info->szImageFile, ICON );

return TRUE;
}

BOOL __stdcall PluginFunc( VOID *Parm )
{
int VulnNumber;

if( !PlugInitLib((struct arglist *)Parm) )
{
return FALSE;
}

PlugSetVulnNum( (struct arglist *)Parm, 0 );

PlugSetCurrentSchedule( (struct arglist *)Parm, CHECKING_STRING );

PlugAddThread( (struct arglist *)Parm, ResolveName, Parm, TIMEOUT );

PlugWaitThread( (struct arglist *)Parm );

VulnNumber = PlugGetVulnNum( (struct arglist *)Parm );

return VulnNumber > 0 ? TRUE : FALSE;
}

DWORD WINAPI ResolveName( void * Parm )
{
char host[256] = { 0 };
char log_type[8] = { 0 };
int verbose = 0;
char message[128] = { 0 };
char host_name[1025] = { 0 };
char serv_name[129] = { 0 };
int ret;

SOCKADDR_IN sin;

strncpy( host, (char *)PlugGetParams((struct arglist *)Parm, "HostName"), 255 );
strncpy( log_type, (char *)PlugGetParams((struct arglist *)Parm, "LogType"), 7 );
verbose = (int)PlugGetParams((struct arglist *)Parm, "ShowVerbose");

sin.sin_family = AF_INET;
sin.sin_addr.s_addr = inet_addr( host );
sin.sin_port = htons( 80 );

sprintf( message, "正在解析 %s的反向域名...", host );
PlugSetCurrentSchedule( (struct arglist *)Parm, message );

if( verbose )
{
PlugAlertUser ( (struct arglist *)Parm, 0, message );
}

ret = getnameinfo( (struct sockaddr *)&sin, sizeof(SOCKADDR_IN), host_name, 1024, serv_name, 128, NULL );

if( ret != 0 )
{
return 0;
}

if( !strcmp( host, host_name) )
{
return 0;
}

if( verbose )
{
memset( message, 0, sizeof(message) );
sprintf( message, "反向解析 %s 成功", host );
PlugAlertUser( (struct arglist *)Parm, AT_NORMAL, message );
}

memset( message, 0, sizeof(message) );

if ( stricmp(log_type, "HTM") && stricmp(log_type, "HTML") )
{
sprintf( message, "机器名: %s\n", host_name );
}
else
{
sprintf( message, "机器名: %s\n", host_name );
}

PlugLogToFile( (struct arglist *)Parm, "none", "NOTE", message );

PlugAddVulnNum((struct arglist *)Parm);

memset( message, 0, sizeof(message) );
sprintf ( message, "%s\n%s\n%s\n", host, VULN_MEMBER_NAME, host_name );

PlugAddToTV ( message, ICON );