CN105407186A - Method and device for acquiring subdomain names - Google Patents

Abstract

The invention discloses a method and device for acquiring a subdomain name, relates to the technical field of the Internet, and can solve the problem that the acquired subdomain name recorded in a search engine may not be comprehensive. The method of the present invention mainly includes: after determining the parent domain name, detecting whether the domain name system DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability; domain name; if the DNS server does not have a DNS domain transmission vulnerability, obtain the first subdomain name set of the parent domain name recorded in the search engine, and obtain the second subdomain name set of the parent domain name according to the preset domain name rule base; for the first subdomain name set and the subdomain names in the third subdomain name set formed by the second subdomain name set are deduplicated to obtain all subdomain names of the parent domain name. The present invention is mainly applicable to the scene of querying all sub-domain names under a certain parent domain name by using a sub-domain name query tool.

Description

Method and device for obtaining a subdomain name

technical field

The present invention relates to the technical field of the Internet, in particular to a method and device for acquiring a subdomain name.

Background technique

With the rapid development of Internet technology, more and more enterprises or individuals have built their own websites in order to realize operations such as promoting products and online shopping through the websites. With the increase of websites, applications for website domain name management or website security maintenance also increase.

In practical applications, when performing website domain name management or website security maintenance, it is necessary to obtain all domain names of the website (that is, the root domain name and all subdomain names under the root domain name) before subsequent operations can be performed. Among them, if you want to manage or maintain a website, its root domain name is very easy to obtain, but it is difficult to obtain thousands of sub-domain names under the root domain name. As long as the user has visited a certain webpage through a search engine, the search engine will include the domain name in the URL corresponding to the webpage into the database, so the commonly used method of obtaining subdomain names in the prior art is: through crawlers or other methods Get the subdomain name recorded in the search engine. However, only the subdomain names searched by the search engine can be recorded and included by the search engine, therefore, the subdomain names recorded in the search engine may not be comprehensive. It can be seen from this that how to more comprehensively obtain subdomain names under a certain root domain name is a major problem today.

Contents of the invention

In view of this, the present invention provides a method and device for obtaining a subdomain name, which can solve the problem that the subdomain name recorded in the search engine obtained in the prior art may not be comprehensive, so that the unknown subdomain name cannot be managed and maintained.

In one aspect, the present invention provides a method for obtaining a subdomain name, the method comprising:

After determining the parent domain name, detecting whether the Domain Name System DNS server corresponding to the parent domain name contains a DNS domain transmission vulnerability;

If the DNS server contains a DNS domain transmission vulnerability, then obtain all subdomain names of the parent domain name based on the DNS domain transmission vulnerability;

If the DNS server has no DNS domain transfer vulnerability, then obtain the first set of sub-domain names of the parent domain name recorded in the search engine, and obtain the second set of sub-domain names of the parent domain name according to the preset domain name rule base, the The preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name;

Deduplicating the subdomain names in the third subdomain name set formed by the first subdomain name set and the second subdomain name set to obtain all subdomain names of the parent domain name.

In another aspect, the present invention provides a device for obtaining a subdomain name, the device comprising:

The detection unit is used to detect whether the domain name system DNS server corresponding to the parent domain name contains a DNS domain transmission vulnerability after the parent domain name is determined;

An obtaining unit, configured to obtain all subdomain names of the parent domain name based on the DNS domain transfer vulnerability when the detection result of the detection unit is that the DNS server contains a DNS domain transfer vulnerability;

The obtaining unit is further configured to obtain the first sub-domain name set of the parent domain name recorded in the search engine when the DNS server has no DNS domain transfer vulnerability, and obtain the first sub-domain name set of the parent domain name according to a preset domain name rule base The second set of sub-domain names, the preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name;

A de-duplication unit, configured to de-duplicate the sub-domain names in the third sub-domain name set formed by the first sub-domain name set and the second sub-domain name set obtained by the acquisition unit, and obtain the parent domain name All subdomains.

By virtue of the above technical solution, the method and device for obtaining a sub-domain name provided by the present invention can first detect whether the DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability after determining the parent domain name. If the DNS server contains a DNS domain transfer vulnerability, Then all the subdomain names of the parent domain name can be directly obtained from the DNS server side based on the DNS domain transfer vulnerability, so that the obtained subdomain names are the most comprehensive; The first sub-domain name set and the second sub-domain name set of the parent domain name are obtained according to the preset domain name rule base, and the sub-domain names in the third sub-domain name set composed of the first sub-domain name set and the second sub-domain name set are deduplicated. , to obtain the subdomain name of the parent domain name, because the subdomain name obtained through the two methods has complementary effects, it is more comprehensive than the subdomain name obtained only through the search engine.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same components. In the attached picture:

FIG. 1 shows a flow chart of a method for obtaining a subdomain name provided by an embodiment of the present invention;

FIG. 2 shows a block diagram of an apparatus for obtaining a subdomain name provided by an embodiment of the present invention;

FIG. 3 shows a block diagram of another apparatus for acquiring a subdomain name provided by an embodiment of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

The embodiment of the present invention provides a method for obtaining a subdomain name, as shown in Figure 1, the method mainly includes:

101. After determining the parent domain name, detect whether the DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability.

After the user enters the parent domain name on the subdomain search interface, the terminal receives the search instruction, determines the parent domain name of the subdomain name to be searched according to the search instruction, and then detects whether the DNS server in the current network contains a DNS domain transfer vulnerability, so as to determine whether All subdomain names under the parent domain name can be obtained directly from the DNS server side.

It should be noted that the parent domain name in this step may be the root domain name (ie, the first-level domain name), or the second-level domain name or other levels of domain names. For example, if the parent domain name is a first-level domain name, the sub-domain names to be searched are second-level domain names and domain names below the second-level domain name; if the parent domain name is a second-level domain name, the sub-domain names to be checked are third-level domain names and third-level domain names The following domain names.

102. If the DNS server contains a DNS domain transmission vulnerability, then obtain all subdomain names of the parent domain name based on the DNS domain transmission vulnerability.

In practical applications, in order to prevent users from being unable to access the network due to DNS server failure, network operators generally set up two DNS servers, one as the primary DNS server and the other as the standby DNS server. Among them, the primary DNS server is used to perform domain name resolution on the URL accessed by each terminal, and transmits the updated domain name list to the standby DNS through DNS domain transmission, so as to realize the synchronization of the primary and secondary DNS. When the primary DNS fails, it will switch to the secondary DNS. The DNS server can continue to perform domain name resolution on URLs accessed by each terminal. Under normal circumstances, the DNS domain transfer operation is only applied between the primary DNS server and the backup DNS server, but many primary DNS servers are often wrongly configured so that as long as a device sends a request, the primary DNS server will feed back a list of domain names to the other party. . Therefore, when it is detected that the DNS server contains a DNS domain transfer vulnerability, all subdomain names of the parent domain name can be obtained based on the DNS domain transfer vulnerability.

103. If the DNS server has no DNS domain transfer vulnerability, obtain the first sub-domain name set of the parent domain name recorded in the search engine, and obtain the second sub-domain name set of the parent domain name according to the preset domain name rule base.

When the DNS server does not have a DNS domain transfer vulnerability, all subdomain names of the parent domain name can be obtained in other ways.

Method 1: Obtain the subdomain name of the parent domain name recorded in the search engine.

In practical applications, when a user accesses a certain webpage through a search engine, the domain name carried in the URL of the webpage will be recorded locally, so the domain name recorded in the search engine can be obtained. It should be noted that there may be one or more search engines in this step, which is not limited here.

Method 2: Obtain the subdomain name of the parent domain name according to the preset domain name rule base.

Wherein, the default domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name. This method is to obtain the real sub-domain name of the parent domain name by constructing different sub-domain names under the parent domain name and verifying the constructed sub-domain names.

104. Perform deduplication processing on the subdomain names in the third subdomain name set formed by the first subdomain name set and the second subdomain name set, to obtain all subdomain names of the parent domain name.

After obtaining the first sub-domain name set through the search engine and the second sub-domain name set through the preset domain name rule base, the first sub-domain name set and the second sub-domain name set can be merged into a new sub-domain name set (ie, the third sub-domain name collection), and de-duplicate the sub-domain names in the third sub-domain name collection, so as to obtain all sub-domain names under the parent domain name.

The method for obtaining a sub-domain name provided by the embodiment of the present invention can first detect whether the DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability after determining the parent domain name. The transmission vulnerability obtains all subdomain names of the parent domain name from the DNS server side, so as to obtain the most comprehensive subdomain names; if the DNS server does not have DNS domain transmission vulnerabilities, obtain the first subdomain name set of the parent domain name recorded in the search engine and Obtain the second sub-domain name set of the parent domain name according to the preset domain name rule base, and deduplicate the sub-domain names in the third sub-domain name set composed of the first sub-domain name set and the second sub-domain name set, and obtain the sub-domain name of the parent domain name. Domain names, because the subdomains obtained through the two methods have complementary effects, are more comprehensive than subdomains obtained only through search engines.

Further, the specific implementation method of obtaining all subdomain names of the parent domain name based on the DNS domain transmission vulnerability in the above step 101 may be: sending a domain name list request to the DNS server; receiving the domain name list sent by the DNS server according to the domain name list request, and selecting Get all subdomains of the parent domain.

Wherein, the domain name list records correspondences between all domain names in the network and IP addresses of websites. When it is determined that the DNS server (i.e., the primary DNS server) has a DNS domain transfer vulnerability, the terminal can send a domain name list request to the DNS server; because the DNS server has a DNS domain transfer vulnerability, the DNS server side does not set the DNS domain transfer permission, so when After receiving the domain name list request, it will feed back the data response carrying the domain name list to the terminal according to the domain name list request; after the terminal receives the data response carrying the domain name list, it can obtain the domain name list from the data response, and find out what needs to be found. All subdomains under the parent domain name.

Furthermore, since the webpages visited by users using various search engines are different, for example, some users have visited webpage m through search engine 1, but no user has visited webpage n through search engine 2, so the parent domain name recorded in each search engine The types of subdomains vary. Therefore, in order to make the obtained sub-domain names of the parent domain name more comprehensive, the sub-domain names of the parent domain name recorded in each search engine can be respectively obtained, and the set of the obtained sub-domain names of the parent domain name recorded in all search engines can be determined as the first A collection of subdomain names.

Specifically, the specific implementation manner of obtaining the subdomain name of the parent domain name recorded in the search engine is: based on the search engine, the subdomain name of the parent domain name recorded in the search engine is obtained through a query command.

Wherein, the query command includes a site command. For example, if you search for the subdomain name of "xyz.com" based on a search engine, you can search for "site:xyz.com" in the search engine, so as to obtain all the subdomain names of "xyz.com" recorded in the search engine.

Further, the specific implementation method of obtaining the second sub-domain name set of the parent domain name according to the preset domain name rule base mentioned in the above embodiment may be: based on the sub-domain name construction rules in the preset domain name rule base, construct the corresponding sub-domain name of the parent domain name Virtual sub-domain name; if the URL corresponding to the virtual sub-domain name exists, then determine the virtual sub-domain name as a sub-domain name of the parent domain name; if the URL corresponding to the virtual sub-domain name does not exist, then determine that the virtual sub-domain name is not a sub-domain name of the parent domain name; The determined set of sub-domain names of the parent domain name is determined as the second set of sub-domain names.

Wherein, the specific implementation method of determining whether the URL corresponding to the virtual subdomain name exists can be based on a search engine, searching for the URL carrying the virtual subdomain name, and if the page corresponding to the URL is successfully returned, then it is determined that the virtual subdomain name is a subdomain name of the parent domain name , if the page corresponding to the URL is not successfully returned, it is determined that the virtual subdomain name is not a subdomain name of the parent domain name.

Exemplarily, if the parent domain name is "abc.com", the subdomain name of the parent domain name constructed according to a certain subdomain construction rule in the preset domain name rule base can be "m.abc.com". A search engine accesses "http//:m.abc.com". If the page corresponding to "http//:m.abc.com" is successfully returned, then "m.abc.com" is determined to be the subdomain name of "abc.com", if not, "http//:m.abc. com" (for example, prompting that the URL is wrong), it is determined that "m.abc.com" is not a subdomain name of "abc.com".

Further, after determining that the DNS server contains a DNS domain transfer vulnerability, and obtaining all subdomain names of the parent domain name based on the DNS domain transfer vulnerability, the terminal can send a vulnerability notification to the DNS server, so that the administrator can repair the vulnerabilities generated on the DNS server side in a timely manner . Wherein, the vulnerability notification includes a vulnerability type, for example, the vulnerability type is a DNS domain transfer vulnerability.

Further, according to the above method embodiment, another embodiment of the present invention also provides a device for acquiring a subdomain name, as shown in FIG. 2 , the device mainly includes: a detection unit 21, an acquisition unit 22 and a deduplication unit 23 . in,

The detection unit 21 is configured to detect whether the domain name system DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability after the parent domain name is determined;

The obtaining unit 22 is used to obtain all subdomain names of the parent domain name based on the DNS domain transfer vulnerability when the detection result of the detection unit 21 is that the DNS server contains a DNS domain transfer vulnerability;

The obtaining unit 22 is also used to obtain the first sub-domain name set of the parent domain name recorded in the search engine when the DNS server has no DNS domain transfer vulnerability, and obtain the second sub-domain name set of the parent domain name according to the preset domain name rule base, pre-set A domain name rule library is set up to record the rules for constructing each sub-domain name under the parent domain name;

The de-duplication unit 23 is configured to de-duplicate the sub-domain names in the third sub-domain name set formed by the first sub-domain name set and the second sub-domain name set obtained by the acquiring unit 22, and obtain all sub-domain names of the parent domain name.

The device for obtaining a sub-domain name provided by the embodiment of the present invention can first detect whether the DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability after determining the parent domain name. The transmission vulnerability obtains all subdomain names of the parent domain name from the DNS server side, so as to obtain the most comprehensive subdomain names; if the DNS server does not have DNS domain transmission vulnerabilities, obtain the first subdomain name set of the parent domain name recorded in the search engine and Obtain the second sub-domain name set of the parent domain name according to the preset domain name rule base, and deduplicate the sub-domain names in the third sub-domain name set composed of the first sub-domain name set and the second sub-domain name set, and obtain the sub-domain name of the parent domain name. Domain names, because the subdomains obtained through the two methods have complementary effects, are more comprehensive than subdomains obtained only through search engines.

Further, as shown in Figure 3, the acquisition unit 22 includes:

A sending module 221, configured to send a domain name list request to a DNS server;

The receiving module 222 is used to receive the domain name list sent by the DNS server according to the domain name list request, and the corresponding relationship between all domain names in the network and the website IP addresses is recorded in the domain name list;

The first obtaining module 223 is configured to obtain all sub-domain names of the parent domain name from the list of domain names received by the receiving module 222 .

Further, as shown in Figure 3, the acquisition unit 22 includes:

The second obtaining module 224 is used to respectively obtain the sub-domain names of the parent domain names recorded in each search engine;

The first determining module 225 is configured to determine the obtained set of subdomain names of the parent domain name recorded in all search engines as the first set of subdomain names.

Further, as shown in FIG. 3 , the second acquiring module 224 is configured to acquire the subdomain name of the parent domain name recorded in the search engine through a query command based on the search engine. .

Further, as shown in FIG. 3, the query command includes a site command.

Further, as shown in Figure 3, the acquisition unit 22 includes:

A construction module 226, configured to construct a virtual sub-domain name corresponding to the parent domain name based on the sub-domain name construction rules in the preset domain name rule base;

The second determining module 227 is configured to determine the virtual subdomain name as a subdomain name of the parent domain name when the uniform resource locator URL corresponding to the virtual subdomain name constructed by the building module exists;

The second determining module 227 is further configured to determine the determined set of sub-domain names of the parent domain name as the second set of sub-domain names.

Further, as shown in Figure 3, the device also includes:

The sending unit 24 is configured to send a vulnerability notification to the DNS server after obtaining all the subdomain names of the parent domain name based on the DNS domain transfer vulnerability, where the vulnerability notification includes the type of the vulnerability.

Embodiments of the invention disclose:

A1. A method for obtaining a subdomain name, characterized in that the method includes:

After determining the parent domain name, detecting whether the Domain Name System DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability;

If the DNS server contains a DNS domain transmission vulnerability, then obtain all subdomain names of the parent domain name based on the DNS domain transmission vulnerability;

If the DNS server has no DNS domain transfer vulnerability, then obtain the first set of sub-domain names of the parent domain name recorded in the search engine, and obtain the second set of sub-domain names of the parent domain name according to the preset domain name rule base, the The preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name;

Deduplicating the subdomain names in the third subdomain name set formed by the first subdomain name set and the second subdomain name set to obtain all subdomain names of the parent domain name.

A2. The method according to A1, wherein the obtaining of all subdomain names of the parent domain name based on the DNS domain transfer vulnerability includes:

Send a domain name list request to the DNS server;

Receiving the domain name list sent by the DNS server according to the domain name list request, the domain name list records the correspondence between all domain names in the network and the IP addresses of websites;

Obtain all subdomain names of the parent domain name from the domain name list.

A3, according to the method described in A1, it is characterized in that, the first sub-domain name set of the parent domain name recorded in the acquisition search engine includes:

Respectively obtain the sub-domain names of the parent domain names recorded in each search engine;

The obtained set of subdomain names of the parent domain name recorded in all search engines is determined as the first set of subdomain names.

A4, according to the method described in A3, it is characterized in that, the sub-domain names of the described parent domain names recorded in each search engine are obtained respectively, including:

Based on the search engine, the subdomain name of the parent domain name recorded in the search engine is acquired through a query command.

A5. The method according to A4, wherein the query command includes a site command.

A6. The method according to A1, wherein the obtaining the second sub-domain name set of the parent domain name according to the preset domain name rule base includes:

Constructing a virtual subdomain name corresponding to the parent domain name based on the subdomain construction rules in the preset domain name rule library;

If the uniform resource locator URL corresponding to the virtual sub-domain name exists, then determine the virtual sub-domain name as a sub-domain name of the parent domain name;

determining the determined set of sub-domain names of the parent domain name as the second set of sub-domain names.

A7. The method according to any one of A1 to A6, characterized in that, after acquiring all subdomain names of the parent domain name based on the DNS domain transmission vulnerability, the method further includes:

sending a vulnerability notification to the DNS server, where the vulnerability notification includes a type of vulnerability.

B8. A device for obtaining a subdomain name, characterized in that the device includes:

The detection unit is used to detect whether the domain name system DNS server corresponding to the parent domain name contains a DNS domain transmission vulnerability after the parent domain name is determined;

An obtaining unit, configured to obtain all subdomain names of the parent domain name based on the DNS domain transfer vulnerability when the detection result of the detection unit is that the DNS server contains a DNS domain transfer vulnerability;

The obtaining unit is further configured to obtain the first sub-domain name set of the parent domain name recorded in the search engine when the DNS server has no DNS domain transfer vulnerability, and obtain the first sub-domain name set of the parent domain name according to a preset domain name rule base The second set of sub-domain names, the preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name;

A de-duplication unit, configured to de-duplicate the sub-domain names in the third sub-domain name set formed by the first sub-domain name set and the second sub-domain name set obtained by the acquisition unit, and obtain the parent domain name All subdomains.

B9. The device according to B8, wherein the acquisition unit includes:

A sending module, configured to send a domain name list request to the DNS server;

The receiving module is used to receive the domain name list sent by the DNS server according to the domain name list request, and the corresponding relationship between all domain names and website IP addresses in the network is recorded in the domain name list;

A first acquiring module, configured to acquire all subdomain names of the parent domain name from the domain name list received by the receiving module.

B10. The device according to B8, wherein the acquisition unit includes:

The second obtaining module is used to respectively obtain the sub-domain names of the parent domain names recorded in each search engine;

The first determining module is configured to determine the obtained set of sub-domain names of the parent domain name recorded in all search engines as the first set of sub-domain names.

B11. The device according to B10, wherein the second acquiring module is configured to acquire the subdomain name of the parent domain name recorded in the search engine through a query command based on the search engine.

B12, according to the described device of B11, it is characterized in that, described inquiry order comprises site order.

B13. The device according to B8, wherein the acquisition unit includes:

A construction module, configured to construct a virtual sub-domain name corresponding to the parent domain name based on the sub-domain name construction rules in the preset domain name rule base;

A second determining module, configured to determine the virtual subdomain name as a subdomain name of the parent domain name when the Uniform Resource Locator URL corresponding to the virtual subdomain name constructed by the construction module exists;

The second determining module is further configured to determine the determined set of sub-domain names of the parent domain name as the second set of sub-domain names.

B14. The device according to any one of B8 to B13, wherein the device also includes:

A sending unit, configured to send a vulnerability notification to the DNS server after acquiring all subdomain names of the parent domain name based on the DNS domain transmission vulnerability, the vulnerability notification including a type of vulnerability.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

It can be understood that related features in the above methods and devices can refer to each other. In addition, "first", "second" and so on in the above embodiments are used to distinguish each embodiment, and do not represent the advantages and disadvantages of each embodiment.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) can be used in practice to implement the state detection method, device, server, and system device of a portable electronic anti-lost device according to an embodiment of the present invention. Some or all of the functions of some or all of the components. The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

Claims (10)

1. A method for obtaining a subdomain name, characterized in that the method comprises: After determining the parent domain name, detecting whether the Domain Name System DNS server corresponding to the parent domain name contains a DNS domain transfer vulnerability; If the DNS server contains a DNS domain transmission vulnerability, then obtain all subdomain names of the parent domain name based on the DNS domain transmission vulnerability; If the DNS server has no DNS domain transfer vulnerability, then obtain the first set of sub-domain names of the parent domain name recorded in the search engine, and obtain the second set of sub-domain names of the parent domain name according to the preset domain name rule base, the The preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name; Deduplicating the subdomain names in the third subdomain name set formed by the first subdomain name set and the second subdomain name set to obtain all subdomain names of the parent domain name. 2. The method according to claim 1, wherein the obtaining all subdomain names of the parent domain name based on the DNS domain transfer vulnerability comprises: Send a domain name list request to the DNS server; Receiving the domain name list sent by the DNS server according to the domain name list request, the domain name list records the correspondence between all domain names in the network and the IP addresses of websites; Obtain all subdomain names of the parent domain name from the domain name list. 3. The method according to claim 1, wherein said acquiring the first sub-domain name set of said parent domain name recorded in the search engine comprises: Respectively obtain the sub-domain names of the parent domain names recorded in each search engine; The obtained set of subdomain names of the parent domain name recorded in all search engines is determined as the first set of subdomain names. 4. The method according to claim 3, wherein said acquiring the sub-domain names of said parent domain name recorded in each search engine respectively comprises: Based on the search engine, the subdomain name of the parent domain name recorded in the search engine is acquired through a query command. 5. The method according to claim 4, wherein the query command comprises a site command. 6. The method according to claim 1, wherein the obtaining the second sub-domain name set of the parent domain name according to the preset domain name rule base comprises: Constructing a virtual subdomain name corresponding to the parent domain name based on the subdomain construction rules in the preset domain name rule library; If the uniform resource locator URL corresponding to the virtual sub-domain name exists, then determine the virtual sub-domain name as a sub-domain name of the parent domain name; determining the determined set of sub-domain names of the parent domain name as the second set of sub-domain names. 7. The method according to any one of claims 1 to 6, characterized in that, after acquiring all subdomain names of the parent domain name based on the DNS domain transfer vulnerability, the method further comprises: sending a vulnerability notification to the DNS server, where the vulnerability notification includes a type of vulnerability. 8. A device for obtaining a subdomain name, characterized in that the device comprises: The detection unit is used to detect whether the domain name system DNS server corresponding to the parent domain name contains a DNS domain transmission vulnerability after the parent domain name is determined; An obtaining unit, configured to obtain all subdomain names of the parent domain name based on the DNS domain transfer vulnerability when the detection result of the detection unit is that the DNS server contains a DNS domain transfer vulnerability; The obtaining unit is further configured to obtain the first sub-domain name set of the parent domain name recorded in the search engine when the DNS server has no DNS domain transfer vulnerability, and obtain the first sub-domain name set of the parent domain name according to a preset domain name rule base The second set of sub-domain names, the preset domain name rule library is used to record the rules for constructing each sub-domain name under the parent domain name; A de-duplication unit, configured to de-duplicate the sub-domain names in the third sub-domain name set formed by the first sub-domain name set and the second sub-domain name set obtained by the acquisition unit, and obtain the parent domain name All subdomains. 9. The device according to claim 8, wherein the acquiring unit comprises: A sending module, configured to send a domain name list request to the DNS server; The receiving module is used to receive the domain name list sent by the DNS server according to the domain name list request, and the corresponding relationship between all domain names and website IP addresses in the network is recorded in the domain name list; A first acquiring module, configured to acquire all subdomain names of the parent domain name from the domain name list received by the receiving module. 10. The device according to claim 8, wherein the acquiring unit comprises: The second obtaining module is used to respectively obtain the sub-domain names of the parent domain names recorded in each search engine; The first determining module is configured to determine the obtained set of sub-domain names of the parent domain name recorded in all search engines as the first set of sub-domain names.