#!/bin/bash
# Name     : Accurate Reverse IP
# Type     : Enumeration
# Vendor   : http://zerobyte.id/
# Version  : 2.0
#
# Installation :
#   wget -O reverseip.sh https://pastebin.com/raw/cArj07Sy;sed -i -e 's/\r$//' reverseip.sh;chmod +x reverseip.sh;
# Run :
#   ./reverseip.sh

echo "     ____            ________  ";
echo "    / __ \___ _   __/  _/ __ \ ";
echo "   / /_/ / _ \ | / // // /_/ / ";
echo "  / _, _/  __/ |/ // // ____/  ";
echo " /_/ |_|\___/|___/___/_/ V 2.0 ";
echo "                By ZeroByte.ID "
echo "----- Accurate Reverse IP -----";
echo "";

echo -ne "[?] Input Site : ";
read TARGET;

REALIP=$(dig +short ${TARGET} | grep -oE "\b((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" | head -1);

echo "INFO: address $REALIP"
if [[ -z ${REALIP} ]];then
	echo "ERROR: ${TARGET} invalid domain";
	exit;
fi

if [[ -f ./accurev-ip/${TARGET}_SITES.LST ]];then
	echo "INFO: ${TARGET} had scanned";
	echo "INFO: file locate (./accurev-ip/${TARGET}.done)"
	echo -ne "[?] Want to try scan again? [y/n] : ";
	read CHS;
	if [[ ${CHS} == "n" ]];then
		exit;
	fi
	rm -f ./accurev-ip/${TARGET}.done
fi

if [[ ! -d "accurev-ip" ]];then
	mkdir accurev-ip
fi

function cleanUp() {
	if [[ -f REVERSEIP.TEMP ]];then
		rm REVERSEIP.TEMP;
	fi
	if [[ -f REVERSEIP2.TEMP ]];then
		rm REVERSEIP2.TEMP;
	fi
	if [[ -f REVERSEIP3.TEMP ]];then
		rm REVERSEIP3.TEMP;
	fi
}
cleanUp;

function yougetsignal() {
	WEB="${1}"
	CURL=$(curl -s -F "remoteAddress=${WEB}" "https://domains.yougetsignal.com/domains.php");
	IP=$(echo ${CURL} | grep -Po 'remoteIpAddress":"\K.*?(?=")');
	echo "INFO: Grab sites from yougetsignal.com"
	i=0;
	for SITE in $(echo ${CURL} | grep -Po '\["\K.*?(?=",)');
	do
		((i++))
		echo "${SITE}" >> REVERSEIP.TEMP;
	done
	echo "INFO: Total ${i} sites grabbed";
}

function viewdns() {
	WEB="${1}";
	echo "INFO: Grab sites from viewdns.info"
	i=0;
	for SITE in $(curl -s "https://viewdns.info/reverseip/?host=${WEB}&t=1" | grep '</td><td' | sed 's|</td><td|\n|g' | sed 's| <td>| |g' | awk '{print $2}' | sed  '/^$/d' | sed '1d' | sed '1d');
	do
		((i++))
		echo "${SITE}" >> REVERSEIP.TEMP;
	done
	echo "INFO: Total ${i} sites grabbed";
}

function hackertarget() {
	WEB="${1}";
	echo "INFO: Grab sites from hackertarget.com"
	i=0;
	for SITE in $(curl -s -d "theinput=${WEB}&thetest=reverseiplookup&name_of_nonce_field=d210302267&_wp_http_referer=%2Freverse-ip-lookup%2F" "https://hackertarget.com/reverse-ip-lookup/" | sed -n -e '/<pre id="formResponse">/,/<\/pre>/p' | sed 's/<pre id="formResponse">/LINEPALINGATAS\n/g' | grep -v LINEPALINGATAS | grep -v '</pre>');
	do
		((i++))
		echo "${SITE}" >> REVERSEIP.TEMP;
	done
	echo "INFO: Total ${i} sites grabbed";
}

yougetsignal ${TARGET}
viewdns ${TARGET}
hackertarget ${TARGET}

cat REVERSEIP.TEMP | sort -n | uniq >> REVERSEIP2.TEMP
echo "INFO: Total unique sites $(cat REVERSEIP2.TEMP | wc -l)";

function webchk() {
	WEB="${1}";
	ADDR=$(dig +short ${WEB} | grep -oE "\b((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" | head -1);
	if [[ ! -z ${ADDR} ]]
	then
		echo "INFO: ${WEB} - ${ADDR}";
		echo "${ADDR} ${WEB}" >> REVERSEIP3.TEMP;
	else
		echo "ERROR: ${WEB} invalid domain";
		return 1;
	fi
}

for WEB in $(cat REVERSEIP2.TEMP);
do
	webchk "${WEB}" &
done
wait

cat REVERSEIP3.TEMP | grep "${REALIP}" | awk '{print $2}' >> ./accurev-ip/${TARGET}.done;
echo "INFO: Total $(cat ./accurev-ip/${TARGET}.done | wc -l) sites same with ${TARGET}'s server";
echo "DONE: Saved ./accurev-ip/${TARGET}.done";
cleanUp;