/*
# Partly ported piece from Fierce.pl by RSnake.
# Dirty Record lookup.
# script settings:
error_reporting(0);
ini_set("max_execution_time",0);
function QP($host,$wc) {
# Fierce cards, with few added by myself.
$records = array("mirror","database","phpmyadmin","scrape","s craper","torrent",
"webcam","cam","warez","uploads","usenet","config" ,"httpt","ssl","ssh","hidden",
"web","docs","pub","home","jobs","careers","my","p ublic","pub","ir","investor",
"investors","images","img","img01","img02","includ e","media","static","cdn",
"akamai","ssl","ssl1","ssl01","cache","video","vid eos","ftp","ajax","xml","mobile",
"wap","sms","isync","cgi","members","login","signi n","signup","online","tcl",
"apache","iis","zeus","websphere","domino","search ","download","downloads",
"news","support","forum","forums","about","help"," helpdesk","en","us","uk","de",
"internal","intl","intranet","www-int","int","corp","mgmt","management","sales",
"marketing","billing","it","eng","eng1","eng01","e ngineering","ops","ops1","ops01",
"ops2","ops02","operations","dev","dev1","dev01"," stage","staging","development",
"pr","test","lab","labs","qa","employees","go","st art","tool","tools","problemtracker",
"tracker","bug","bugs","bugzilla","subversion","sv ","cvs","rcs","dhcp","ups","irc",
"talk","chat","voip","homebase","call","ms","owa", "owa01","outlook","webmail","mail",
"email","strongmail","antivirus","av","spam","smtp ","pop","hr","humanresources",
"sharepoint","blog","blogs","wordpress","drupal"," rss","cms","wiki","vantive",
"db","db1","db01","db2","db02","mysql","mysql1","m ysql01","sql","sql1","sql01",
"mssql","mssql1","mssql01","ldap","oracle","people soft","siebel","crm","erp",
"customer","customers","dns","nameserv","a.aut h-ns","b.auth-ns","c.auth-ns","ix",
"mx","mtu","mta","ns","ns1","ns01","ns2","ns02","n s3","ns4","ns5","rtr","rtr1",
"rtr01","att","mci","sprint","router","core","prox y","r1","r01","r2","r02","core01",
"sw","sw1","s1","s2","sw01","cisco","juniper","f5" ,"lb","squid","checkpoint",
"foundry","wireless","ap","wlan","lan","nokia","ne tgear","netscreen","arcsight",
"citrix","vnc","netscaler","toplayer","opsware","o ps","netapp","app","app1",
"app01","nms","nas","san","esm","ism","tivoli","op enview","ov","hpov","cricket",
"flow","mrtg","log","log1","log01","log2","log02", "logs","syslog","syslogs",
"ias","webstats","analyzer","xlogan","logfile","lo gfiles","webalizer","alterwind",
"activestat","clicktrack","webtrends","faststats", "urchin","z-log","zlog","wusage",
"keynote","stat","stats","remstats","monitoring"," splunk","vpn","vpn1","vpn01",
"vpn2","vpn02","connect","outside","inside","snort ","ids","cims","sim","fs",
"gw","concentrator","con","console","honeypot","ad ","mom","id","sec","securid",
"fwsm","fwsm1","fwsm01","fw","fw1","dialup","dmz", "sun","sun1","sun01","sun2",
"sun02","bsd","freebsd","freebsd1","freebsd01","fr eebsd2","freebsd02","linux",
"linux1","linux01","linux2","linux02","win","win1" ,"win01","win2","win02",
"windows","windows1","windows01","windows2","windo ws02","quake","counterstrike",
"halflife","mp3");
echo "Hosts found:
";
foreach($records as $rec){
if(checkdnsrr($rec.$host.'.','A')) {
# spit results.
echo $rec.'.'.$host."
";
}
}
# Wildcard canonical names
if($wc) {
echo "Wildcards found:
";
for($a=0;$a<16;$a++){
if(checkdnsrr('ww'.$a.'.'.$host.'.','A')) {
# wwX results.
echo "ww".$a.'.'.$host."
";
}
}
for($b=0;$b<16;$b++){
if(checkdnsrr('www'.$b.'.'.$host.'.','A')) {
# wwwXresults.
echo "www".$b.'.'.$host."
";
}
}
for($c=0;$c<16;$c++){
if(checkdnsrr('bsd'.$c.'.'.$host.'.','A')) {
# bsdXresults.
echo "bsd".$c.'.'.$host."
";
}
}
for($d=0;$d<16;$d++){
if(checkdnsrr('a'.$d.'.'.$host.'.','A')) {
# aXresults.
echo "a".$d.'.'.$host."
";
}
}
for($e=0;$e<16;$e++){
if(checkdnsrr('b'.$e.'.'.$host.'.','A')) {
# bXresults.
echo "b".$e.'.'.$host."
";
}
}
for($f=0;$f<16;$f++){
if(checkdnsrr('mysql'.$f.'.'.$host.'.','A')) {
# mysqlXresults.
echo "mysql".$f.'.'.$host."
";
}
}
for($g=0;$g<16;$g++){
if(checkdnsrr('proxy'.$g.'.'.$host.'.','A')) {
# proxyXresults.
echo "proxy".$g.'.'.$host."
";
}
}
}
}
# example
# host, wildcards true or leave empty
QP("google.com","true");
*/
?>