Utilizzare curl per ottenere i risultati DNS

Introduzione a due metodi per utilizzare il comando curl per ottenere i risultati delle query DNS.
Tags:
Categories:

Questo articolo presenta due metodi per ottenere i risultati delle query DNS utilizzando curl:

  1. Formato JSON DNS
  2. Formato Wire Format DNS

1. Query in formato JSON DNS

Restituisce una risposta DNS in formato JSON, facile da analizzare.

Google

curl -H 'accept: application/dns-json' "https://dns.google/resolve?name=baidu.com&type=A" | jq .

Cloudflare

curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=baidu.com&type=A' | jq .

Aliyun

curl -H "accept: application/dns-json" "https://223.5.5.5/resolve?name=baidu.com&type=1" | jq .

dns.pub

curl -H 'accept: application/dns-json' 'https://doh.dns.pub/dns-query?name=baidu.com&type=A' | jq .

AdGuard Private DNS

# Non supportato per ora

2. Query in formato DNS Wire Format

Restituisce una risposta DNS in formato binario, necessita di ulteriore analisi.

Google

curl -H 'accept: application/dns-message' 'https://dns.google/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB'  | hexdump -c

Cloudflare

curl -H 'accept: application/dns-message' 'https://cloudflare-dns.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB'  | hexdump -c

Aliyun

curl -H 'accept: application/dns-message' "https://dns.alidns.com/dns-query?dns=P8QBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB"  | hexdump -c

dns.pub

curl -H 'accept: application/dns-message' 'https://doh.dns.pub/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB'  | hexdump -c

AdGuard Private DNS

curl -H 'accept: application/dns-message' 'https://public0.adguardprivate.com/dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB'  | hexdump -c

Analizzare le risposte DNS con Python

# pip install dnspython
# pip install requests
# Analizzare la risposta in formato JSON
import json
import requests

def query_dns_json(domain="example.com", type="A"):
  """Utilizzare il formato JSON per interrogare DNS"""
  url = "https://dns.google/resolve"
  params = {"name": domain, "type": type}
  headers = {"accept": "application/dns-json"}

  response = requests.get(url, params=params, headers=headers)
  return json.dumps(response.json(), indent=2)

# Analizzare la risposta in formato Wire Format
def query_dns_wire(domain="example.com"):
  """Utilizzare il formato Wire Format per interrogare DNS"""
  import dns.message
  import requests
  import base64

  # Creare un messaggio di query DNS
  query = dns.message.make_query(domain, 'A')
  wire_format = query.to_wire()
  dns_query = base64.b64encode(wire_format).decode('utf-8')

  # Inviare la richiesta
  url = "https://dns.google/dns-query"
  params = {"dns": dns_query}
  headers = {"accept": "application/dns-message"}

  response = requests.get(url, params=params, headers=headers)
  dns_response = dns.message.from_wire(response.content)
  return str(dns_response)

if __name__ == "__main__":
  print("Risultato della query in formato JSON:")
  print(query_dns_json())
  print("\nRisultato della query in formato Wire Format:")
  print(query_dns_wire())

Generare dati codificati Base64 in formato DNS Wire Format

# pip install dnspython
import base64
import dns.message
import dns.rdatatype

# Creare un messaggio di query DNS
query = dns.message.make_query('example.com', dns.rdatatype.A)

# Convertire il messaggio in Wire Format
wire_format = query.to_wire()

# Convertire in base64
wire_format_base64 = base64.b64encode(wire_format).decode('utf-8')

# Stampare
print(wire_format_base64)