네트워크 응답 분석

# ⚠️ 이 코드는 허가된 환경에서만 사용하세요.
import subprocess
import platform
import re

def ping(host: str, count: int = 3, timeout: int = 2) -> dict:
    """크로스플랫폼 ping — subprocess로 시스템 ping 호출."""
    is_windows = platform.system().lower() == 'windows'
    args = ['ping']

    if is_windows:
        args += ['-n', str(count), '-w', str(timeout * 1000), host]
    else:
        args += ['-c', str(count), '-W', str(timeout), host]

    try:
        result = subprocess.run(args, capture_output=True, text=True, timeout=timeout * count + 5)
        output = result.stdout

        # 응답 시간 추출
        rtts = [float(m) for m in re.findall(r'time[=<](\d+\.?\d*)\s*ms', output)]
        loss_match = re.search(r'(\d+)%\s*(?:packet )?loss', output)

        return {
            'host': host,
            'alive': result.returncode == 0,
            'rtt_avg_ms': sum(rtts) / len(rtts) if rtts else None,
            'rtt_min_ms': min(rtts) if rtts else None,
            'rtt_max_ms': max(rtts) if rtts else None,
            'loss_percent': int(loss_match.group(1)) if loss_match else None,
        }
    except subprocess.TimeoutExpired:
        return {'host': host, 'alive': False, 'error': 'timeout'}
    except FileNotFoundError:
        return {'host': host, 'alive': False, 'error': 'ping not found'}

# print(ping('localhost'))
# {'host': 'localhost', 'alive': True, 'rtt_avg_ms': 0.05, 'loss_percent': 0}

# ⚠️ 이 코드는 허가된 환경에서만 사용하세요.
def traceroute(host: str, max_hops: int = 30, timeout: float = 2.0) -> list[dict]:
    """경로상 라우터들 추적."""
    is_windows = platform.system().lower() == 'windows'
    cmd = 'tracert' if is_windows else 'traceroute'
    args = [cmd, '-m', str(max_hops), host]

    if not is_windows:
        args = [cmd, '-w', str(int(timeout)), '-m', str(max_hops), host]

    try:
        result = subprocess.run(args, capture_output=True, text=True, timeout=timeout * max_hops + 10)
        hops = []
        for line in result.stdout.split('\n'):
            # "1  192.168.1.1  0.5 ms"
            m = re.match(r'\s*(\d+)\s+(\S+)\s+(.+)', line)
            if m:
                hops.append({
                    'hop': int(m.group(1)),
                    'host': m.group(2),
                    'detail': m.group(3),
                })
        return hops
    except (subprocess.TimeoutExpired, FileNotFoundError):
        return []

# pip install dnspython
# ⚠️ 이 코드는 허가된 환경에서만 사용하세요.
import dns.resolver

def dns_lookup(domain: str, record_types: list[str] = None) -> dict:
    """도메인의 DNS 레코드 전체 수집."""
    if record_types is None:
        record_types = ['A', 'AAAA', 'MX', 'NS', 'TXT', 'SOA', 'CNAME']

    result = {'domain': domain, 'records': {}}

    for rtype in record_types:
        try:
            answers = dns.resolver.resolve(domain, rtype, lifetime=5)
            result['records'][rtype] = [str(r) for r in answers]
        except dns.resolver.NoAnswer:
            result['records'][rtype] = []
        except dns.resolver.NXDOMAIN:
            result['error'] = '도메인 존재 안 함'
            return result
        except dns.exception.Timeout:
            result['records'][rtype] = ['timeout']

    return result

# print(dns_lookup('github.com'))
"""
{
  'domain': 'github.com',
  'records': {
    'A': ['140.82.121.4'],
    'MX': ['1 aspmx.l.google.com.', ...],
    'NS': ['dns1.p08.nsone.net.', ...],
    'TXT': ['v=spf1 ip4:192.30.252.0/22 ...'],
    ...
  }
}
"""

def domain_recon(domain: str) -> dict:
    """DNS + Ping + 서브도메인 추정 종합."""
    result = {'domain': domain}

    # 1. DNS 레코드
    result['dns'] = dns_lookup(domain)

    # 2. A 레코드의 첫 IP에 ping
    a_records = result['dns']['records'].get('A', [])
    if a_records:
        result['ping'] = ping(a_records[0])

    # 3. SPF/DMARC 보안 레코드 점검
    txt = result['dns']['records'].get('TXT', [])
    result['security'] = {
        'spf': any('v=spf1' in t for t in txt),
        'dmarc': False,  # _dmarc.도메인 별도 조회 필요
    }
    try:
        dmarc = dns.resolver.resolve(f'_dmarc.{domain}', 'TXT', lifetime=5)
        result['security']['dmarc'] = any('v=DMARC1' in str(r) for r in dmarc)
    except Exception:
        pass

    # 4. 일반적 서브도메인 추정
    common_subs = ['www', 'mail', 'api', 'admin', 'dev', 'staging', 'blog']
    found_subs = []
    for sub in common_subs:
        try:
            dns.resolver.resolve(f'{sub}.{domain}', 'A', lifetime=2)
            found_subs.append(f'{sub}.{domain}')
        except Exception:
            pass
    result['subdomains'] = found_subs

    return result