From b722d515a57395f2c31c91de9eeb4fe1c63a74db Mon Sep 17 00:00:00 2001
From: Pinga <121483313+getpinga@users.noreply.github.com>
Date: Mon, 27 Nov 2023 17:32:02 +0200
Subject: [PATCH] Added rdap web client

---
 rdap/client/index.php | 162 ++++++++++++++++++++++++++++++++++++++++++
 rdap/client/rdap.php  |  42 +++++++++++
 2 files changed, 204 insertions(+)
 create mode 100644 rdap/client/index.php
 create mode 100644 rdap/client/rdap.php
diff --git a/rdap/client/index.php b/rdap/client/index.php
new file mode 100644
index 0000000..c66db4f
--- /dev/null
+++ b/rdap/client/index.php
@@ -0,0 +1,162 @@
+<?php
+session_start();
+use Gregwar\Captcha\CaptchaBuilder;
+    
+// Include this part only if the script is requested as an image (for the captcha)
+if ($_SERVER['REQUEST_URI'] == '/captcha.php') {
+    require 'vendor/autoload.php'; // Adjust path as needed
+
+    $captcha = new CaptchaBuilder;
+    $captcha->build();
+
+    $_SESSION['captcha'] = $captcha->getPhrase();
+
+    header('Content-type: image/jpeg');
+    $captcha->output();
+    exit;
+}
+?>
+
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>RDAP Lookup</title>
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/milligram/1.4.1/milligram.min.css">
+</head>
+<body>
+    <div class="container">
+        <h1>RDAP Lookup</h1>
+        <div class="row">
+            <input type="text" id="domainInput" placeholder="Enter Domain Name" autocapitalize="none">
+            <img id="captchaImg" src="captcha.php" onclick="this.src='captcha.php?'+Math.random();">
+            <input type="text" id="captchaInput" placeholder="Enter Captcha" autocapitalize="none">
+            <button id="rdapButton">Lookup</button>
+        </div>
+        <div id="result"></div>
+    </div>
+    
+<script>
+    document.addEventListener('DOMContentLoaded', function() {
+        document.getElementById('rdapButton').addEventListener('click', function() {
+            var domain = document.getElementById('domainInput').value;
+            var captcha = document.getElementById('captchaInput').value;
+
+            fetch('rdap.php', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
+                body: 'domain=' + encodeURIComponent(domain) + '&captcha=' + encodeURIComponent(captcha)
+            })
+            .then(response => response.json())
+            .then(data => {
+                if (data.error) {
+                    console.error('Error:', data.error);
+                    document.getElementById('result').innerText = 'Error: ' + data.error;
+                } else {
+                    // Parse and display RDAP data
+                    let output = parseRdapResponse(data);
+                    document.getElementById('result').innerText = output;
+                }
+                // Reload captcha
+                document.getElementById('captchaImg').src = 'captcha.php?' + Math.random();
+            })
+            .catch(error => console.error('Error:', error));
+        });
+    });
+
+    function parseRdapResponse(data) {
+        let output = '';
+
+        // Domain Name and Status
+        output += 'Domain Name: ' + (data.ldhName || 'N/A') + '\n';
+        output += 'Status: ' + (data.status ? data.status.join(', ') : 'N/A') + '\n\n';
+
+        // Parsing entities for specific roles like registrar and registrant
+        if (data.entities && data.entities.length > 0) {
+            data.entities.forEach(entity => {
+                if (entity.roles) {
+                    output += entity.roles.join(', ').toUpperCase() + ' Contact:\n';
+                    if (entity.vcardArray && entity.vcardArray.length > 1) {
+                        output += parseVcard(entity.vcardArray[1]);
+                    }
+                    if (entity.roles.includes('registrar') && entity.publicIds) {
+                        output += '   IANA ID: ' + entity.publicIds.map(id => id.identifier).join(', ') + '\n';
+                    }
+                    if (entity.roles.includes('abuse') && entity.vcardArray) {
+                        const emailEntry = entity.vcardArray[1].find(entry => entry[0] === 'email');
+                        if (emailEntry) {
+                            output += '   Abuse Email: ' + emailEntry[3] + '\n';
+                        }
+                    }
+                    output += '\n';
+                }
+            });
+        }
+    
+        // Nameservers
+        if (data.nameservers && data.nameservers.length > 0) {
+            output += 'Nameservers:\n';
+            data.nameservers.forEach(ns => {
+                output += ' - ' + ns.ldhName + '\n';
+            });
+            output += '\n';
+        }
+
+        // SecureDNS Details
+        if (data.secureDNS) {
+            output += 'SecureDNS:\n';
+            output += ' - Delegation Signed: ' + (data.secureDNS.delegationSigned ? 'Yes' : 'No') + '\n';
+            output += ' - Zone Signed: ' + (data.secureDNS.zoneSigned ? 'Yes' : 'No') + '\n\n';
+        }
+
+        // Events (like registration, expiration dates)
+        if (data.events && data.events.length > 0) {
+            output += 'Events:\n';
+            data.events.forEach(event => {
+                output += ' - ' + event.eventAction + ': ' + new Date(event.eventDate).toLocaleString() + '\n';
+            });
+            output += '\n';
+        }
+
+        // Domain Status and Notices
+        if (data.notices && data.notices.length > 0) {
+            output += 'Notices:\n';
+            data.notices.forEach(notice => {
+                output += ' - ' + (notice.title || 'Notice') + ': ' + notice.description.join(' ') + '\n';
+            });
+        }
+
+        return output;
+    }
+
+    function parseVcard(vcard) {
+        let vcardOutput = '';
+        vcard.forEach(entry => {
+            switch (entry[0]) {
+                case 'fn':
+                    vcardOutput += '   Name: ' + entry[3] + '\n';
+                    break;
+                case 'adr':
+                    if (Array.isArray(entry[3]) && entry[3].length > 0) {
+                        // Assuming that the address parts are in the correct order
+                        const addressParts = entry[3];
+                        vcardOutput += '   Address: ' + addressParts.join(', ') + '\n';
+                    }
+                    break;
+                case 'email':
+                    vcardOutput += '   Email: ' + entry[3] + '\n';
+                    break;
+                case 'tel':
+                    vcardOutput += '   Phone: ' + entry[3] + '\n';
+                    break;
+            }
+        });
+        return vcardOutput;
+    }
+</script>
+
+</body>
+</html>
\ No newline at end of file
diff --git a/rdap/client/rdap.php b/rdap/client/rdap.php
new file mode 100644
index 0000000..00c983c
--- /dev/null
+++ b/rdap/client/rdap.php
@@ -0,0 +1,42 @@
+<?php
+session_start();
+
+// Check for a valid POST request
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    echo json_encode(['error' => 'Invalid request method.']);
+    exit;
+}
+
+// Captcha validation (if used)
+if ($_POST['captcha'] !== $_SESSION['captcha']) {
+    echo json_encode(['error' => 'Captcha verification failed']);
+    exit;
+}
+
+// Invalidate the current captcha
+unset($_SESSION['captcha']);
+
+// Domain name from the POST request
+$domain = $_POST['domain'];
+
+// RDAP server URL
+$rdapServer = 'https://rdap.EXAMPLE.COM/domain/';
+
+// Initialize cURL session
+$ch = curl_init();
+curl_setopt($ch, CURLOPT_URL, $rdapServer . $domain);
+curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
+
+// Execute cURL session and close it
+$response = curl_exec($ch);
+curl_close($ch);
+
+// Check for errors
+if (!$response) {
+    echo json_encode(['error' => 'Error fetching RDAP data.']);
+    exit;
+}
+
+// Output the RDAP data
+echo $response;
\ No newline at end of file
