#!

/usr/bin/python
# This script is designed for discovering backends of web servers.
# Misuse of this program may vary.
############################################################
#
_____
_ _ _
#
/ ____|
| (_) |
# | |
_ __ ___ __| |_| |_ ___
# | |
| '__/ _ \/ _` | | __/ __|
# | |____| | | __/ (_| | | |_\__ \
#
\_____|_| \___|\__,_|_|\__|___/
#
# Code written by Chris Poole | http://twitter.com/codingplanets
#
_____ _
_
_
# | __ \(_)
| |
(_)
# | | | |_ ___ ___| | __ _ _ _ __ ___ ___ _ __
# | | | | / __|/ __| |/ _` | | '_ ` _ \ / _ \ '__|
# | |__| | \__ \ (__| | (_| | | | | | | | __/ |
# |_____/|_|___/\___|_|\__,_|_|_| |_| |_|\___|_|
#
# I do not support any illegal use made with this program,
# this program is ideal for security/knowledge purpouses only
# any other use is forbidden.
#
_____
_
#
/ ____|
| |
# | |
___ _ __ ___ _ __ ___ __ _ _ __ __| |___
# | |
/ _ \| '_ ` _ \| '_ ` _ \ / _` | '_ \ / _` / __|
# | |___| (_) | | | | | | | | | | | (_| | | | | (_| \__ \
#
\_____\___/|_| |_| |_|_| |_| |_|\__,_|_| |_|\__,_|___/
#
#
/!\ N O R M A L E X E C U T I O N /!\
#
#
python script.py
#
#_____________________________________________________________
# Normal exection will present run-out line, Enter domain name.
# Domain should present as of: google.com
# "http" & "www" will result in script not functioning correctly
################################################################
import socket
subdomains = ["ftp", "cpanel", "webmail", "forum", "driect-connect", "vb", "foru
ms", "home", "direct", "mail", "access", "admin", "administrator", "email", "dow
nloads", "ssh", "webmin", "paralel", "parallels", "www0", "www", "www1", "www2",
"www3", "www4", "www5"]
def creator():
creator = '''
_=______________________-_
=< | | ========|______________| CloudFlare
\| | ========|______________|
/ | ========|/
| | ========|
|___| ________|
|.... / | |
|......| \ |
|......|-____'
|......|
|.......|
|.......|
|_______)
__________________________________________________
| C O D E D B Y Chris Poole | @codingplanets
|

|__________________________________________________|
'''
print(creator)
creator()
link = raw_input("[root@NASA ~]# ")
for sbdm in subdomains:
try:
hosts = str(sbdm) + "." + str(link)
trueip = socket.gethostbyname(str(hosts))
print "[!] Discovered >> " + str(trueip)
except:
pass