Shell脚本批量检测域名是否解析到阿里云WAF

本文以批量检测域名是否解析到阿里云WAF为例，完整脚本如下

#!/bin/bash

# 批量检测域名是否解析到阿里云WAF
# 使用方法: ./batch_check_waf.sh <域名列表文件>

# 检查参数
if [ $# -ne 1 ]; then
    echo "错误: 请提供包含域名列表的文件作为参数。"
    echo "用法: $0 <域名列表文件>"
    exit 1
fi

DOMAIN_FILE=$1

# 检查文件是否存在
if [ ! -f "$DOMAIN_FILE" ]; then
    echo "错误: 文件 $DOMAIN_FILE 不存在。"
    exit 1
fi

# 检查文件是否为空
if [ ! -s "$DOMAIN_FILE" ]; then
    echo "错误: 文件 $DOMAIN_FILE 为空。"
    exit 1
fi

# 阿里云WAF CNAME特征
WAF_PATTERN="yundunwaf"
# 输出文件
OK_FILE="waf_protected.txt"
ERROR_FILE="waf_unprotected.txt"
NO_RESOLVE_FILE="unresolved_domains.txt"

# 初始化输出文件
echo -e "域名\t\t\tCNAME记录" > "$OK_FILE"
echo "域名" > "$ERROR_FILE"
echo "域名" > "$NO_RESOLVE_FILE"

# 计数器
total=0
protected=0
unprotected=0
unresolved=0

echo "开始批量检测域名WAF解析状态..."
echo "============================================================"

# 读取域名列表
DOMAINS=$(cat "$DOMAIN_FILE" | sort | uniq)

for domain in $DOMAINS; do
    # 去除可能的空白字符
    domain=$(echo "$domain" | xargs)
    
    if [ -z "$domain" ]; then
        continue
    fi
    
    ((total++))
    echo "检测中 ($total/$total): $domain"
    
    # 查询CNAME记录
    CNAME_RESULT=$(dig "$domain" CNAME +short 2>/dev/null | tail -1)
    
    if [ -z "$CNAME_RESULT" ]; then
        # 如果没有CNAME记录，尝试查询A记录
        IP_RESULT=$(dig "$domain" A +short 2>/dev/null | head -1)
        if [ -z "$IP_RESULT" ]; then
            echo "  ❌ 无法解析"
            echo "$domain" >> "$NO_RESOLVE_FILE"
            ((unresolved++))
        else
            echo "  ⚠️  有A记录但无CNAME记录(可能未接入WAF)"
            echo "$domain" >> "$ERROR_FILE"
            ((unprotected++))
        fi
    else
        # 检查是否包含WAF特征
        if echo "$CNAME_RESULT" | grep -q "$WAF_PATTERN"; then
            echo "  ✅ 已解析到阿里云WAF"
            echo -e "$domain\t\t\t$CNAME_RESULT" >> "$OK_FILE"
            ((protected++))
        else
            echo "  ❌ 有CNAME记录但未指向WAF: $CNAME_RESULT"
            echo "$domain" >> "$ERROR_FILE"
            ((unprotected++))
        fi
    fi
    echo "--------------------------------------------"
done

# 输出统计结果
echo "============================================================"
echo "检测完成！"
echo "统计结果:"
echo "  - 总检测域名数: $total"
echo "  - 已接入WAF: $protected"
echo "  - 未接入WAF: $unprotected" 
echo "  - 无法解析: $unresolved"
echo ""
echo "结果文件:"
echo "  - 已保护域名: $OK_FILE"
echo "  - 未保护域名: $ERROR_FILE"
echo "  - 无法解析域名: $NO_RESOLVE_FILE"
echo "============================================================"