shohei 2.4.1

Infrastructure diagnostics library: DNS, DNSSEC, TLS certificate inspection, email security, DNS propagation, and MCP-integrated AI agent support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121

//! Wildcard DNS detection — check if `*.domain` is configured.

use serde::{Deserialize, Serialize};
use crate::error::Result;

/// Check for wildcard DNS configuration.
pub async fn check_wildcard_dns(req: &WildcardDnsRequest) -> Result<WildcardDnsResult> {
    let domain = &req.domain;
    let timeout_secs = req.timeout_secs;

    // Generate random subdomain labels to probe
    let random_labels = vec![
        "randomtest123456789",
        "nonexistentsubdomain",
        "xyzabc987654321test",
    ];

    let mut wildcard_detected = false;
    let mut responses = Vec::new();

    for label in random_labels {
        let test_domain = format!("{}.{}", label, domain);

        let dns_req = crate::api::DnsCheckRequest {
            domain: test_domain.clone(),
            record_types: vec!["A".to_string()],
            timeout_secs,
            ..Default::default()
        };

        match crate::api::check_dns(&dns_req).await {
            Ok(results) => {
                // Check if we got any answers (indicates wildcard or explicit record)
                let has_answers = results.iter().any(|r| !r.answers.is_empty());
                if has_answers {
                    wildcard_detected = true;
                    // Collect the IPs returned
                    let ips: Vec<String> = results
                        .iter()
                        .flat_map(|r| {
                            r.answers.iter().filter_map(|record| {
                                if let crate::api::RecordData::A(ip) = &record.data {
                                    Some(ip.clone())
                                } else {
                                    None
                                }
                            })
                        })
                        .collect();

                    responses.push(WildcardProbeResult {
                        label: label.to_string(),
                        responded: true,
                        ips,
                        error: None,
                    });
                } else {
                    responses.push(WildcardProbeResult {
                        label: label.to_string(),
                        responded: false,
                        ips: vec![],
                        error: None,
                    });
                }
            }
            Err(e) => {
                responses.push(WildcardProbeResult {
                    label: label.to_string(),
                    responded: false,
                    ips: vec![],
                    error: Some(e.to_string()),
                });
            }
        }
    }

    // Determine if wildcard is confirmed (all probes respond) or potential (some respond)
    let confirmed_responses = responses.iter().filter(|r| r.responded).count();
    let wildcard_status = match confirmed_responses {
        3 => "confirmed".to_string(),
        1..=2 => "potential".to_string(),
        _ => "not-detected".to_string(),
    };

    Ok(WildcardDnsResult {
        domain: domain.clone(),
        wildcard_detected,
        wildcard_status,
        probes: responses,
        error: None,
    })
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct WildcardDnsRequest {
    pub domain: String,
    #[serde(default = "default_timeout")]
    pub timeout_secs: u64,
}

fn default_timeout() -> u64 {
    10
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct WildcardDnsResult {
    pub domain: String,
    pub wildcard_detected: bool,
    /// "confirmed", "potential", "not-detected"
    pub wildcard_status: String,
    pub probes: Vec<WildcardProbeResult>,
    pub error: Option<String>,
}

#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct WildcardProbeResult {
    pub label: String,
    pub responded: bool,
    pub ips: Vec<String>,
    pub error: Option<String>,
}