扫域名工具

import requests
import dns.resolver

def scan_domain(domain):
    try:
        # 获取域名的IP地址
        ip = requests.get(f'http://{domain}').headers['X-Forwarded-For']
        print(f'Domain: {domain}, IP: {ip}')

        # 获取域名的DNS记录
        answers = dns.resolver.resolve(domain, 'A')
        for rdata in answers:
            print(f'DNS A Record: {rdata}')

        # 获取域名的子域名（示例）
        subdomains = ['www', 'mail', 'ftp']  # 可以扩展更多子域名
        for subdomain in subdomains:
            try:
                answers = dns.resolver.resolve(f'{subdomain}.{domain}', 'A')
                for rdata in answers:
                    print(f'Subdomain: {subdomain}.{domain}, IP: {rdata}')
            except dns.resolver.NXDOMAIN:
                print(f'Subdomain {subdomain}.{domain} does not exist')

    except Exception as e:
        print(f'Error: {e}')

# 示例调用
scan_domain('example.com')