This commit is contained in:
Jing Ling
2020-07-14 18:56:27 +08:00
parent 37ee399af1
commit 6e18de8922
76 changed files with 183 additions and 172 deletions
+3 -3
View File
@@ -6,7 +6,7 @@ from config.log import logger
class CensysAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Certificate'
self.source = "CensysAPIQuery"
self.addr = 'https://www.censys.io/api/v1/search/certificates'
@@ -33,7 +33,7 @@ class CensysAPI(Query):
if status != 'ok':
logger.log('ALERT', f'{self.source} module {status}')
return
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
pages = json.get('metadata').get('pages')
for page in range(2, pages + 1):
@@ -41,7 +41,7 @@ class CensysAPI(Query):
resp = self.post(self.addr, json=data, auth=(self.id, self.secret))
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+1 -1
View File
@@ -22,7 +22,7 @@ class CertSpotter(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class Crtsh(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Certificate'
self.source = 'CrtshQuery'
self.addr = 'https://crt.sh/'
@@ -21,7 +21,7 @@ class Crtsh(Query):
if not resp:
return
text = resp.text.replace(r'\n', ' ')
subdomains = self.match_subdomains(self.domain, text)
subdomains = self.match_subdomains(text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class Google(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Certificate'
self.source = 'GoogleQuery'
self.addr = 'https://transparencyreport.google.com/' \
@@ -23,7 +23,7 @@ class Google(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -22,7 +22,7 @@ class CheckAXFR(Module):
def __init__(self, domain: str):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Check'
self.source = 'AXFRCheck'
self.results = []
@@ -45,7 +45,7 @@ class CheckAXFR(Module):
names = zone.nodes.keys()
for name in names:
full_domain = str(name) + '.' + self.domain
subdomain = self.match_subdomains(self.domain, full_domain)
subdomain = self.match_subdomains(full_domain)
self.subdomains = self.subdomains.union(subdomain)
record = zone[name].to_text(name)
self.results.append(record)
+2 -2
View File
@@ -12,7 +12,7 @@ class CheckCDX(Module):
"""
def __init__(self, domain: str):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Check'
self.source = "CrossDomainXml"
@@ -31,7 +31,7 @@ class CheckCDX(Module):
if not resp:
return
if resp and len(resp.content):
self.subdomains = self.match_subdomains(self.domain, resp.text)
self.subdomains = self.match_subdomains(resp.text)
def run(self):
"""
+2 -2
View File
@@ -14,7 +14,7 @@ from config.log import logger
class CheckCert(Module):
def __init__(self, domain):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.port = 443 # ssl port
self.module = 'Check'
self.source = 'CertInfo'
@@ -32,7 +32,7 @@ class CheckCert(Module):
except Exception as e:
logger.log('DEBUG', e.args)
return
subdomains = self.match_subdomains(self.domain, str(cert_dict))
subdomains = self.match_subdomains(str(cert_dict))
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+2 -2
View File
@@ -14,7 +14,7 @@ class CheckCSP(Module):
"""
def __init__(self, domain, header):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Check'
self.source = 'ContentSecurityPolicy'
self.csp_header = header
@@ -52,7 +52,7 @@ class CheckCSP(Module):
if not csp:
logger.log('DEBUG', f'There is no Content-Security-Policy in the header of {self.domain}')
return
self.subdomains = self.match_subdomains(self.domain, csp)
self.subdomains = self.match_subdomains(csp)
def run(self):
"""
+2 -2
View File
@@ -8,7 +8,7 @@ from common import utils
class CheckNSEC(Module):
def __init__(self, domain):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'check'
self.source = "CheckNSEC"
@@ -21,7 +21,7 @@ class CheckNSEC(Module):
subdomain = str()
for item in answer:
record = item.to_text()
subdomains = self.match_subdomains(self.domain, record)
subdomains = self.match_subdomains(record)
subdomain = ''.join(subdomains) # 其实这里的subdomains的长度为1 也就是说只会有一个子域
self.subdomains = self.subdomains.union(subdomains)
self.gen_record(subdomains, record)
+2 -2
View File
@@ -11,7 +11,7 @@ class CheckRobots(Module):
"""
def __init__(self, domain):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Check'
self.source = 'Robots'
@@ -30,7 +30,7 @@ class CheckRobots(Module):
if not resp:
return
if resp and len(resp.content):
self.subdomains = self.match_subdomains(self.domain, resp.text)
self.subdomains = self.match_subdomains(resp.text)
def run(self):
"""
+2 -2
View File
@@ -11,7 +11,7 @@ class CheckRobots(Module):
"""
def __init__(self, domain):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Check'
self.source = 'Sitemap'
@@ -35,7 +35,7 @@ class CheckRobots(Module):
if not resp:
return
if resp and len(resp.content):
self.subdomains = self.match_subdomains(self.domain, resp.text)
self.subdomains = self.match_subdomains(resp.text)
def run(self):
"""
+1 -1
View File
@@ -26,7 +26,7 @@ class ArchiveCrawl(Crawl):
for resp in cdx.iter(url, limit=limit):
if resp.data.get('status') not in ['301', '302']:
url = resp.data.get('url')
subdomains = self.match_subdomains(self.register(domain),
subdomains = self.match_subdomains(self.get_maindomain(domain),
url + resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+1 -1
View File
@@ -26,7 +26,7 @@ class CommonCrawl(Crawl):
for resp in tqdm(cdx.iter(url, limit=limit), total=limit):
if resp.data.get('status') not in ['301', '302']:
subdomains = self.match_subdomains(self.register(domain), resp.text)
subdomains = self.match_subdomains(self.get_maindomain(domain), resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class BinaryEdgeAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'BinaryEdgeAPIQuery'
self.addr = 'https://api.binaryedge.io/v2/query/domains/subdomain/'
@@ -22,7 +22,7 @@ class BinaryEdgeAPI(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+2 -2
View File
@@ -6,7 +6,7 @@ from config.log import logger
class BufferOver(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'BufferOverQuery'
self.addr = 'https://dns.bufferover.run/dns?q='
@@ -26,7 +26,7 @@ class BufferOver(Query):
return
if resp.status_code != 200:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class CeBaidu(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'CeBaiduQuery'
self.addr = 'https://ce.baidu.com/index/getRelatedSites'
@@ -19,7 +19,7 @@ class CeBaidu(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class Chinaz(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'ChinazQuery'
self.addr = 'https://alexa.chinaz.com/'
@@ -19,7 +19,7 @@ class Chinaz(Query):
resp = self.get(self.addr)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class ChinazAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'ChinazAPIQuery'
self.addr = 'https://apidata.chinaz.com/CallAPI/Alexa'
@@ -21,7 +21,7 @@ class ChinazAPI(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class CirclAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'CirclAPIQuery'
self.addr = 'https://www.circl.lu/pdns/query/'
@@ -21,7 +21,7 @@ class CirclAPI(Query):
resp = self.get(self.addr + self.domain, auth=(self.user, self.pwd))
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -79,7 +79,7 @@ class CloudFlareAPI(Query):
logger.log('DEBUG',
f'{list_dns_resp.status_code} {list_dns_resp.text}')
return
subdomains = self.match_subdomains(self.domain, list_dns_resp.text)
subdomains = self.match_subdomains(list_dns_resp.text)
self.subdomains = self.subdomains.union(subdomains)
if not self.subdomains:
# waiting for cloudflare enumerate subdomains
@@ -94,7 +94,7 @@ class CloudFlareAPI(Query):
f'{list_dns_resp.status_code} {list_dns_resp.text}')
return
total_pages = list_dns_resp.json()['result_info']['total_pages']
subdomains = (self.match_subdomains(self.domain, list_dns_resp.text))
subdomains = (self.match_subdomains(list_dns_resp.text))
self.subdomains = self.subdomains.union(subdomains)
page += 1
if page > total_pages:
+2 -2
View File
@@ -6,7 +6,7 @@ from common.query import Query
class DNSdbAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'DNSdbAPIQuery'
self.addr = 'https://api.dnsdb.info/lookup/rrset/name/'
@@ -23,7 +23,7 @@ class DNSdbAPI(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class DNSdumpster(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = "DNSdumpsterQuery"
self.addr = 'https://dnsdumpster.com/'
@@ -26,7 +26,7 @@ class DNSdumpster(Query):
resp = self.post(self.addr, data)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if subdomains:
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class HackerTarget(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = "HackerTargetQuery"
self.addr = 'https://api.hackertarget.com/hostsearch/'
@@ -21,7 +21,7 @@ class HackerTarget(Query):
if not resp:
return
if resp.status_code == 200:
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if subdomains:
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class IP138(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'IP138Query'
self.addr = 'https://site.ip138.com/{domain}/domain.htm'
@@ -19,7 +19,7 @@ class IP138(Query):
resp = self.get(self.addr)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -6,7 +6,7 @@ from config.log import logger
class IPv4InfoAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'IPv4InfoAPIQuery'
self.addr = ' http://ipv4info.com/api_v1/'
@@ -32,7 +32,7 @@ class IPv4InfoAPI(Query):
except Exception as e:
logger.log('DEBUG', e.args)
break
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(str(json))
if not subdomains:
break
# 合并搜索子域名搜索结果
+2 -2
View File
@@ -9,7 +9,7 @@ from common.query import Query
class NetCraft(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'NetCraftQuery'
self.init = 'https://searchdns.netcraft.com/'
@@ -49,7 +49,7 @@ class NetCraft(Query):
resp = self.get(self.addr + last, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
# 合并搜索子域名搜索结果
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class PassiveDnsAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'PassiveDnsQuery'
self.addr = api.passivedns_api_addr or 'http://api.passivedns.cn'
@@ -22,7 +22,7 @@ class PassiveDnsAPI(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class PhoneBook(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'PhoneBookQuery'
@@ -35,7 +35,7 @@ class PhoneBook(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+1 -1
View File
@@ -27,7 +27,7 @@ class QianXun(Query):
resp = self.post(url, data)
if not resp:
break
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
if '<div id="page" class="pagelist">' not in resp.text:
break
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class RapidDNS(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'RapidDNSQuery'
@@ -20,7 +20,7 @@ class RapidDNS(Query):
resp = self.get(url, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class Riddler(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'RiddlerQuery'
self.addr = 'https://riddler.io/search'
@@ -19,7 +19,7 @@ class Riddler(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -7,7 +7,7 @@ from common.query import Query
class Robtex(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = "RobtexQuery"
self.addr = 'https://freeapi.robtex.com/pdns/'
@@ -32,7 +32,7 @@ class Robtex(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if subdomains:
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+1 -1
View File
@@ -5,7 +5,7 @@ from common.query import Query
class SecurityTrailsAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'SecurityTrailsAPIQuery'
self.addr = 'https://api.securitytrails.com/v1/domain/'
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class SiteDossier(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'SiteDossierQuery'
self.addr = 'http://www.sitedossier.com/parentdomain/'
@@ -24,7 +24,7 @@ class SiteDossier(Query):
resp = self.get(url)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
# 合并搜索子域名搜索结果
+1 -1
View File
@@ -27,7 +27,7 @@ class SpyseAPI(Query):
if not resp:
return
json = resp.json()
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(str(json))
if not subdomains: # 搜索没有发现子域名则停止搜索
break
# 合并搜索子域名搜索结果
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class Sublist3r(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'Sublist3rQuery'
@@ -19,7 +19,7 @@ class Sublist3r(Query):
resp = self.get(addr, param)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+2 -2
View File
@@ -7,7 +7,7 @@ from config.log import logger
class ThreatCrowd(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'ThreatCrowdQuery'
self.addr = 'https://www.threatcrowd.org/searchApi' \
@@ -25,7 +25,7 @@ class ThreatCrowd(Query):
return
if resp.status_code != 200:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -6,7 +6,7 @@ from common.query import Query
class WZPCQuery(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'WZPCQuery'
@@ -31,7 +31,7 @@ class WZPCQuery(Query):
break
if not resp:
break
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
if not subdomains:
break
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class Ximcx(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Dataset'
self.source = 'XimcxQuery'
self.addr = 'http://sbd.ximcx.cn/DomainServlet'
@@ -20,7 +20,7 @@ class Ximcx(Query):
if not resp:
return
json = resp.json()
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(str(json))
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+1 -1
View File
@@ -4,7 +4,7 @@ from common.lookup import Lookup
class QueryMX(Lookup):
def __init__(self, domain):
Lookup.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "QueryMX"
self.type = 'MX' # 利用的DNS记录的MX记录收集子域
+1 -1
View File
@@ -4,7 +4,7 @@ from common.lookup import Lookup
class QueryNS(Lookup):
def __init__(self, domain):
Lookup.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "QueryNS"
self.type = 'NS' # 利用的DNS记录的NS记录收集子域
+1 -1
View File
@@ -4,7 +4,7 @@ from common.lookup import Lookup
class QuerySOA(Lookup):
def __init__(self, domain):
Lookup.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "QuerySOA"
self.type = 'SOA' # 利用的DNS记录的SOA记录收集子域
+1 -1
View File
@@ -4,7 +4,7 @@ from common.lookup import Lookup
class QuerySPF(Lookup):
def __init__(self, domain):
Lookup.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "QuerySPF"
self.type = 'SPF' # 利用的DNS记录的SPF记录收集子域
+2 -2
View File
@@ -14,7 +14,7 @@ from config.setting import data_storage_dir
class BruteSRV(Module):
def __init__(self, domain):
Module.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "BruteSRV"
self.type = 'SRV' # 利用的DNS记录的SRV记录查询子域
@@ -50,7 +50,7 @@ class BruteSRV(Module):
continue
for item in answer:
record = str(item)
subdomains = self.match_subdomains(self.domain, record)
subdomains = self.match_subdomains(record)
self.subdomains = self.subdomains.union(subdomains)
self.gen_record(subdomains, record)
+1 -1
View File
@@ -4,7 +4,7 @@ from common.lookup import Lookup
class QueryTXT(Lookup):
def __init__(self, domain):
Lookup.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'dnsquery'
self.source = "QueryTXT"
self.type = 'TXT' # 利用的DNS记录的TXT记录收集子域
+3 -3
View File
@@ -4,7 +4,7 @@ from common.query import Query
class AlienVault(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Intelligence'
self.source = 'AlienVaultQuery'
@@ -21,7 +21,7 @@ class AlienVault(Query):
if not resp:
return
json = resp.json()
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(str(json))
self.subdomains = self.subdomains.union(subdomains)
url = f'{base}/{self.domain}/url_list'
@@ -29,7 +29,7 @@ class AlienVault(Query):
if not resp:
return
json = resp.json()
subdomains = self.match_subdomains(self.domain, str(json))
subdomains = self.match_subdomains(str(json))
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+1 -1
View File
@@ -5,7 +5,7 @@ from common.query import Query
class RiskIQ(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Intelligence'
self.source = 'RiskIQAPIQuery'
self.addr = 'https://api.passivetotal.org/v2/enrichment/subdomains'
+2 -2
View File
@@ -5,7 +5,7 @@ from common.query import Query
class ThreatBookAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Intelligence'
self.source = 'ThreatBookAPIQuery'
self.addr = 'https://api.threatbook.cn/v3/domain/sub_domains'
@@ -22,7 +22,7 @@ class ThreatBookAPI(Query):
resp = self.post(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
self.subdomains = self.subdomains.union(subdomains)
def run(self):
+2 -2
View File
@@ -4,7 +4,7 @@ from common.query import Query
class ThreatMiner(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Intelligence'
self.source = 'ThreatMinerQuery'
self.addr = 'https://www.threatminer.org/getData.php'
@@ -20,7 +20,7 @@ class ThreatMiner(Query):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
# 合并搜索子域名搜索结果
self.subdomains = self.subdomains.union(subdomains)
+1 -1
View File
@@ -11,7 +11,7 @@ class VirusTotal(Query):
self.source = 'VirusTotalQuery'
self.module = 'Intelligence'
self.addr = 'https://www.virustotal.com/ui/domains/{}/subdomains'
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
def query(self):
"""
+1 -1
View File
@@ -5,7 +5,7 @@ from common.query import Query
class VirusTotalAPI(Query):
def __init__(self, domain):
Query.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Intelligence'
self.source = 'VirusTotalAPIQuery'
self.addr = 'https://www.virustotal.com/vtapi/v2/domain/report'
+1 -1
View File
@@ -30,7 +30,7 @@ class Ask(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains:
break
if not full_search:
+1 -1
View File
@@ -54,7 +54,7 @@ class Baidu(Search):
# 获取百度跳转URL响应头的Location字段获取直链
subdomains = self.redirect_match(domain, resp.text)
else:
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if not full_search:
+1 -1
View File
@@ -36,7 +36,7 @@ class Bing(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if not full_search:
+1 -1
View File
@@ -37,7 +37,7 @@ class BingAPI(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if not full_search:
+1 -1
View File
@@ -37,7 +37,7 @@ class FoFa(Search):
if not resp:
return
resp_json = resp.json()
subdomains = self.match_subdomains(self.domain, str(resp_json))
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
self.subdomains = self.subdomains.union(subdomains)
+2 -2
View File
@@ -10,7 +10,7 @@ class Gitee(Search):
self.source = 'GiteeSearch'
self.module = 'Search'
self.addr = 'https://search.gitee.com/'
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.header = self.get_header()
def search(self, full_search=False):
@@ -34,7 +34,7 @@ class Gitee(Search):
if 'class="empty-box"' in resp.text:
break
soup = BeautifulSoup(resp.text, 'html.parser')
subdomains = self.match_subdomains(self.domain, soup.text)
subdomains = self.match_subdomains(soup.text, fuzzy=False)
if not subdomains:
break
if not full_search:
+2 -2
View File
@@ -10,7 +10,7 @@ class GithubAPI(Search):
self.source = 'GithubAPISearch'
self.module = 'Search'
self.addr = 'https://api.github.com/search/code'
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.session = requests.Session()
self.auth_url = 'https://api.github.com'
self.token = api.github_api_token
@@ -60,7 +60,7 @@ class GithubAPI(Search):
if resp.status_code != 200:
logger.log('ERROR', f'{self.source} module query failed')
break
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains:
break
self.subdomains = self.subdomains.union(subdomains)
+1 -1
View File
@@ -40,7 +40,7 @@ class Google(Search):
resp = self.get(url=self.addr, params=payload)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains:
break
if not full_search:
+1 -1
View File
@@ -35,7 +35,7 @@ class GoogleAPI(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains:
break
if not full_search:
+2 -2
View File
@@ -5,7 +5,7 @@ from common.search import Search
class ShodanAPI(Search):
def __init__(self, domain):
Search.__init__(self)
self.domain = self.register(domain)
self.domain = self.get_maindomain(domain)
self.module = 'Search'
self.source = 'ShodanAPISearch'
self.addr = 'https://api.shodan.io/shodan/host/search'
@@ -25,7 +25,7 @@ class ShodanAPI(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if subdomains:
+1 -1
View File
@@ -31,7 +31,7 @@ class So(Search):
resp = self.get(url=self.addr, params=payload)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains:
break
if not full_search:
+1 -1
View File
@@ -28,7 +28,7 @@ class Sogou(Search):
resp = self.get(self.addr, payload)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains:
break
if not full_search:
+1 -1
View File
@@ -36,7 +36,7 @@ class Yahoo(Search):
if not resp:
return
text = resp.text.replace('<b>', '').replace('</b>', '')
subdomains = self.match_subdomains(domain, text)
subdomains = self.match_subdomains(text, fuzzy=False)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if not full_search:
+1 -1
View File
@@ -36,7 +36,7 @@ class Yandex(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(domain, resp.text)
subdomains = self.match_subdomains(resp.text, fuzzy=False)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
if not full_search:
+1 -1
View File
@@ -48,7 +48,7 @@ class ZoomEyeAPI(Search):
resp = self.get(self.addr, params)
if not resp:
return
subdomains = self.match_subdomains(self.domain, resp.text)
subdomains = self.match_subdomains(resp.text)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
self.subdomains = self.subdomains.union(subdomains)