pw域名扫描

import dns.resolver
import concurrent.futures

def check_subdomain(domain, subdomain):
    try:
        full_domain = f"{subdomain}.{domain}"
        answers = dns.resolver.resolve(full_domain, 'A')
        return full_domain, answers
    except dns.resolver.NXDOMAIN:
        return None
    except dns.resolver.NoAnswer:
        return None
    except dns.resolver.Timeout:
        return None

def scan_subdomains(domain, subdomains_list):
    results = []
    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_subdomain = {executor.submit(check_subdomain, domain, subdomain): subdomain for subdomain in subdomains_list}
        for future in concurrent.futures.as_completed(future_to_subdomain):
            result = future.result()
            if result:
                results.append(result)
    return results

# 示例使用
domain = "example.com"
subdomains_list = ["www", "mail", "ftp", "test"]  # 可以扩展这个列表
found_subdomains = scan_subdomains(domain, subdomains_list)
for subdomain, ips in found_subdomains:
    print(f"Found subdomain: {subdomain} with IPs: {ips}")