mirror of
https://github.com/shmilylty/OneForAll.git
synced 2026-10-25 00:56:14 +08:00
优化
This commit is contained in:
@@ -6,7 +6,7 @@ from config.log import logger
|
||||
class CensysAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Certificate'
|
||||
self.source = "CensysAPIQuery"
|
||||
self.addr = 'https://www.censys.io/api/v1/search/certificates'
|
||||
@@ -33,7 +33,7 @@ class CensysAPI(Query):
|
||||
if status != 'ok':
|
||||
logger.log('ALERT', f'{self.source} module {status}')
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
pages = json.get('metadata').get('pages')
|
||||
for page in range(2, pages + 1):
|
||||
@@ -41,7 +41,7 @@ class CensysAPI(Query):
|
||||
resp = self.post(self.addr, json=data, auth=(self.id, self.secret))
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -22,7 +22,7 @@ class CertSpotter(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class Crtsh(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Certificate'
|
||||
self.source = 'CrtshQuery'
|
||||
self.addr = 'https://crt.sh/'
|
||||
@@ -21,7 +21,7 @@ class Crtsh(Query):
|
||||
if not resp:
|
||||
return
|
||||
text = resp.text.replace(r'\n', ' ')
|
||||
subdomains = self.match_subdomains(self.domain, text)
|
||||
subdomains = self.match_subdomains(text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class Google(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Certificate'
|
||||
self.source = 'GoogleQuery'
|
||||
self.addr = 'https://transparencyreport.google.com/' \
|
||||
@@ -23,7 +23,7 @@ class Google(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -22,7 +22,7 @@ class CheckAXFR(Module):
|
||||
|
||||
def __init__(self, domain: str):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Check'
|
||||
self.source = 'AXFRCheck'
|
||||
self.results = []
|
||||
@@ -45,7 +45,7 @@ class CheckAXFR(Module):
|
||||
names = zone.nodes.keys()
|
||||
for name in names:
|
||||
full_domain = str(name) + '.' + self.domain
|
||||
subdomain = self.match_subdomains(self.domain, full_domain)
|
||||
subdomain = self.match_subdomains(full_domain)
|
||||
self.subdomains = self.subdomains.union(subdomain)
|
||||
record = zone[name].to_text(name)
|
||||
self.results.append(record)
|
||||
|
||||
@@ -12,7 +12,7 @@ class CheckCDX(Module):
|
||||
"""
|
||||
def __init__(self, domain: str):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Check'
|
||||
self.source = "CrossDomainXml"
|
||||
|
||||
@@ -31,7 +31,7 @@ class CheckCDX(Module):
|
||||
if not resp:
|
||||
return
|
||||
if resp and len(resp.content):
|
||||
self.subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
self.subdomains = self.match_subdomains(resp.text)
|
||||
|
||||
def run(self):
|
||||
"""
|
||||
|
||||
@@ -14,7 +14,7 @@ from config.log import logger
|
||||
class CheckCert(Module):
|
||||
def __init__(self, domain):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.port = 443 # ssl port
|
||||
self.module = 'Check'
|
||||
self.source = 'CertInfo'
|
||||
@@ -32,7 +32,7 @@ class CheckCert(Module):
|
||||
except Exception as e:
|
||||
logger.log('DEBUG', e.args)
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, str(cert_dict))
|
||||
subdomains = self.match_subdomains(str(cert_dict))
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -14,7 +14,7 @@ class CheckCSP(Module):
|
||||
"""
|
||||
def __init__(self, domain, header):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Check'
|
||||
self.source = 'ContentSecurityPolicy'
|
||||
self.csp_header = header
|
||||
@@ -52,7 +52,7 @@ class CheckCSP(Module):
|
||||
if not csp:
|
||||
logger.log('DEBUG', f'There is no Content-Security-Policy in the header of {self.domain}')
|
||||
return
|
||||
self.subdomains = self.match_subdomains(self.domain, csp)
|
||||
self.subdomains = self.match_subdomains(csp)
|
||||
|
||||
def run(self):
|
||||
"""
|
||||
|
||||
@@ -8,7 +8,7 @@ from common import utils
|
||||
class CheckNSEC(Module):
|
||||
def __init__(self, domain):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'check'
|
||||
self.source = "CheckNSEC"
|
||||
|
||||
@@ -21,7 +21,7 @@ class CheckNSEC(Module):
|
||||
subdomain = str()
|
||||
for item in answer:
|
||||
record = item.to_text()
|
||||
subdomains = self.match_subdomains(self.domain, record)
|
||||
subdomains = self.match_subdomains(record)
|
||||
subdomain = ''.join(subdomains) # 其实这里的subdomains的长度为1 也就是说只会有一个子域
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
self.gen_record(subdomains, record)
|
||||
|
||||
@@ -11,7 +11,7 @@ class CheckRobots(Module):
|
||||
"""
|
||||
def __init__(self, domain):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Check'
|
||||
self.source = 'Robots'
|
||||
|
||||
@@ -30,7 +30,7 @@ class CheckRobots(Module):
|
||||
if not resp:
|
||||
return
|
||||
if resp and len(resp.content):
|
||||
self.subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
self.subdomains = self.match_subdomains(resp.text)
|
||||
|
||||
def run(self):
|
||||
"""
|
||||
|
||||
@@ -11,7 +11,7 @@ class CheckRobots(Module):
|
||||
"""
|
||||
def __init__(self, domain):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Check'
|
||||
self.source = 'Sitemap'
|
||||
|
||||
@@ -35,7 +35,7 @@ class CheckRobots(Module):
|
||||
if not resp:
|
||||
return
|
||||
if resp and len(resp.content):
|
||||
self.subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
self.subdomains = self.match_subdomains(resp.text)
|
||||
|
||||
def run(self):
|
||||
"""
|
||||
|
||||
@@ -26,7 +26,7 @@ class ArchiveCrawl(Crawl):
|
||||
for resp in cdx.iter(url, limit=limit):
|
||||
if resp.data.get('status') not in ['301', '302']:
|
||||
url = resp.data.get('url')
|
||||
subdomains = self.match_subdomains(self.register(domain),
|
||||
subdomains = self.match_subdomains(self.get_maindomain(domain),
|
||||
url + resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -26,7 +26,7 @@ class CommonCrawl(Crawl):
|
||||
|
||||
for resp in tqdm(cdx.iter(url, limit=limit), total=limit):
|
||||
if resp.data.get('status') not in ['301', '302']:
|
||||
subdomains = self.match_subdomains(self.register(domain), resp.text)
|
||||
subdomains = self.match_subdomains(self.get_maindomain(domain), resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class BinaryEdgeAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'BinaryEdgeAPIQuery'
|
||||
self.addr = 'https://api.binaryedge.io/v2/query/domains/subdomain/'
|
||||
@@ -22,7 +22,7 @@ class BinaryEdgeAPI(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -6,7 +6,7 @@ from config.log import logger
|
||||
class BufferOver(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'BufferOverQuery'
|
||||
self.addr = 'https://dns.bufferover.run/dns?q='
|
||||
@@ -26,7 +26,7 @@ class BufferOver(Query):
|
||||
return
|
||||
if resp.status_code != 200:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class CeBaidu(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'CeBaiduQuery'
|
||||
self.addr = 'https://ce.baidu.com/index/getRelatedSites'
|
||||
@@ -19,7 +19,7 @@ class CeBaidu(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class Chinaz(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'ChinazQuery'
|
||||
self.addr = 'https://alexa.chinaz.com/'
|
||||
@@ -19,7 +19,7 @@ class Chinaz(Query):
|
||||
resp = self.get(self.addr)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class ChinazAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'ChinazAPIQuery'
|
||||
self.addr = 'https://apidata.chinaz.com/CallAPI/Alexa'
|
||||
@@ -21,7 +21,7 @@ class ChinazAPI(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class CirclAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'CirclAPIQuery'
|
||||
self.addr = 'https://www.circl.lu/pdns/query/'
|
||||
@@ -21,7 +21,7 @@ class CirclAPI(Query):
|
||||
resp = self.get(self.addr + self.domain, auth=(self.user, self.pwd))
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -79,7 +79,7 @@ class CloudFlareAPI(Query):
|
||||
logger.log('DEBUG',
|
||||
f'{list_dns_resp.status_code} {list_dns_resp.text}')
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, list_dns_resp.text)
|
||||
subdomains = self.match_subdomains(list_dns_resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
if not self.subdomains:
|
||||
# waiting for cloudflare enumerate subdomains
|
||||
@@ -94,7 +94,7 @@ class CloudFlareAPI(Query):
|
||||
f'{list_dns_resp.status_code} {list_dns_resp.text}')
|
||||
return
|
||||
total_pages = list_dns_resp.json()['result_info']['total_pages']
|
||||
subdomains = (self.match_subdomains(self.domain, list_dns_resp.text))
|
||||
subdomains = (self.match_subdomains(list_dns_resp.text))
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
page += 1
|
||||
if page > total_pages:
|
||||
|
||||
@@ -6,7 +6,7 @@ from common.query import Query
|
||||
class DNSdbAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'DNSdbAPIQuery'
|
||||
self.addr = 'https://api.dnsdb.info/lookup/rrset/name/'
|
||||
@@ -23,7 +23,7 @@ class DNSdbAPI(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class DNSdumpster(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = "DNSdumpsterQuery"
|
||||
self.addr = 'https://dnsdumpster.com/'
|
||||
@@ -26,7 +26,7 @@ class DNSdumpster(Query):
|
||||
resp = self.post(self.addr, data)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if subdomains:
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class HackerTarget(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = "HackerTargetQuery"
|
||||
self.addr = 'https://api.hackertarget.com/hostsearch/'
|
||||
@@ -21,7 +21,7 @@ class HackerTarget(Query):
|
||||
if not resp:
|
||||
return
|
||||
if resp.status_code == 200:
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if subdomains:
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class IP138(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'IP138Query'
|
||||
self.addr = 'https://site.ip138.com/{domain}/domain.htm'
|
||||
@@ -19,7 +19,7 @@ class IP138(Query):
|
||||
resp = self.get(self.addr)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -6,7 +6,7 @@ from config.log import logger
|
||||
class IPv4InfoAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'IPv4InfoAPIQuery'
|
||||
self.addr = ' http://ipv4info.com/api_v1/'
|
||||
@@ -32,7 +32,7 @@ class IPv4InfoAPI(Query):
|
||||
except Exception as e:
|
||||
logger.log('DEBUG', e.args)
|
||||
break
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(str(json))
|
||||
if not subdomains:
|
||||
break
|
||||
# 合并搜索子域名搜索结果
|
||||
|
||||
@@ -9,7 +9,7 @@ from common.query import Query
|
||||
class NetCraft(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'NetCraftQuery'
|
||||
self.init = 'https://searchdns.netcraft.com/'
|
||||
@@ -49,7 +49,7 @@ class NetCraft(Query):
|
||||
resp = self.get(self.addr + last, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
# 合并搜索子域名搜索结果
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class PassiveDnsAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'PassiveDnsQuery'
|
||||
self.addr = api.passivedns_api_addr or 'http://api.passivedns.cn'
|
||||
@@ -22,7 +22,7 @@ class PassiveDnsAPI(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class PhoneBook(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'PhoneBookQuery'
|
||||
|
||||
@@ -35,7 +35,7 @@ class PhoneBook(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -27,7 +27,7 @@ class QianXun(Query):
|
||||
resp = self.post(url, data)
|
||||
if not resp:
|
||||
break
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
if '<div id="page" class="pagelist">' not in resp.text:
|
||||
break
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class RapidDNS(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'RapidDNSQuery'
|
||||
|
||||
@@ -20,7 +20,7 @@ class RapidDNS(Query):
|
||||
resp = self.get(url, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class Riddler(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'RiddlerQuery'
|
||||
self.addr = 'https://riddler.io/search'
|
||||
@@ -19,7 +19,7 @@ class Riddler(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -7,7 +7,7 @@ from common.query import Query
|
||||
class Robtex(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = "RobtexQuery"
|
||||
self.addr = 'https://freeapi.robtex.com/pdns/'
|
||||
@@ -32,7 +32,7 @@ class Robtex(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if subdomains:
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class SecurityTrailsAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'SecurityTrailsAPIQuery'
|
||||
self.addr = 'https://api.securitytrails.com/v1/domain/'
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class SiteDossier(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'SiteDossierQuery'
|
||||
self.addr = 'http://www.sitedossier.com/parentdomain/'
|
||||
@@ -24,7 +24,7 @@ class SiteDossier(Query):
|
||||
resp = self.get(url)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
# 合并搜索子域名搜索结果
|
||||
|
||||
@@ -27,7 +27,7 @@ class SpyseAPI(Query):
|
||||
if not resp:
|
||||
return
|
||||
json = resp.json()
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(str(json))
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
# 合并搜索子域名搜索结果
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class Sublist3r(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'Sublist3rQuery'
|
||||
|
||||
@@ -19,7 +19,7 @@ class Sublist3r(Query):
|
||||
resp = self.get(addr, param)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -7,7 +7,7 @@ from config.log import logger
|
||||
class ThreatCrowd(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'ThreatCrowdQuery'
|
||||
self.addr = 'https://www.threatcrowd.org/searchApi' \
|
||||
@@ -25,7 +25,7 @@ class ThreatCrowd(Query):
|
||||
return
|
||||
if resp.status_code != 200:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -6,7 +6,7 @@ from common.query import Query
|
||||
class WZPCQuery(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'WZPCQuery'
|
||||
|
||||
@@ -31,7 +31,7 @@ class WZPCQuery(Query):
|
||||
break
|
||||
if not resp:
|
||||
break
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
if not subdomains:
|
||||
break
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class Ximcx(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Dataset'
|
||||
self.source = 'XimcxQuery'
|
||||
self.addr = 'http://sbd.ximcx.cn/DomainServlet'
|
||||
@@ -20,7 +20,7 @@ class Ximcx(Query):
|
||||
if not resp:
|
||||
return
|
||||
json = resp.json()
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(str(json))
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.lookup import Lookup
|
||||
class QueryMX(Lookup):
|
||||
def __init__(self, domain):
|
||||
Lookup.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "QueryMX"
|
||||
self.type = 'MX' # 利用的DNS记录的MX记录收集子域
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.lookup import Lookup
|
||||
class QueryNS(Lookup):
|
||||
def __init__(self, domain):
|
||||
Lookup.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "QueryNS"
|
||||
self.type = 'NS' # 利用的DNS记录的NS记录收集子域
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.lookup import Lookup
|
||||
class QuerySOA(Lookup):
|
||||
def __init__(self, domain):
|
||||
Lookup.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "QuerySOA"
|
||||
self.type = 'SOA' # 利用的DNS记录的SOA记录收集子域
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.lookup import Lookup
|
||||
class QuerySPF(Lookup):
|
||||
def __init__(self, domain):
|
||||
Lookup.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "QuerySPF"
|
||||
self.type = 'SPF' # 利用的DNS记录的SPF记录收集子域
|
||||
|
||||
@@ -14,7 +14,7 @@ from config.setting import data_storage_dir
|
||||
class BruteSRV(Module):
|
||||
def __init__(self, domain):
|
||||
Module.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "BruteSRV"
|
||||
self.type = 'SRV' # 利用的DNS记录的SRV记录查询子域
|
||||
@@ -50,7 +50,7 @@ class BruteSRV(Module):
|
||||
continue
|
||||
for item in answer:
|
||||
record = str(item)
|
||||
subdomains = self.match_subdomains(self.domain, record)
|
||||
subdomains = self.match_subdomains(record)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
self.gen_record(subdomains, record)
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.lookup import Lookup
|
||||
class QueryTXT(Lookup):
|
||||
def __init__(self, domain):
|
||||
Lookup.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'dnsquery'
|
||||
self.source = "QueryTXT"
|
||||
self.type = 'TXT' # 利用的DNS记录的TXT记录收集子域
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class AlienVault(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Intelligence'
|
||||
self.source = 'AlienVaultQuery'
|
||||
|
||||
@@ -21,7 +21,7 @@ class AlienVault(Query):
|
||||
if not resp:
|
||||
return
|
||||
json = resp.json()
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(str(json))
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
url = f'{base}/{self.domain}/url_list'
|
||||
@@ -29,7 +29,7 @@ class AlienVault(Query):
|
||||
if not resp:
|
||||
return
|
||||
json = resp.json()
|
||||
subdomains = self.match_subdomains(self.domain, str(json))
|
||||
subdomains = self.match_subdomains(str(json))
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class RiskIQ(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Intelligence'
|
||||
self.source = 'RiskIQAPIQuery'
|
||||
self.addr = 'https://api.passivetotal.org/v2/enrichment/subdomains'
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class ThreatBookAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Intelligence'
|
||||
self.source = 'ThreatBookAPIQuery'
|
||||
self.addr = 'https://api.threatbook.cn/v3/domain/sub_domains'
|
||||
@@ -22,7 +22,7 @@ class ThreatBookAPI(Query):
|
||||
resp = self.post(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
def run(self):
|
||||
|
||||
@@ -4,7 +4,7 @@ from common.query import Query
|
||||
class ThreatMiner(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Intelligence'
|
||||
self.source = 'ThreatMinerQuery'
|
||||
self.addr = 'https://www.threatminer.org/getData.php'
|
||||
@@ -20,7 +20,7 @@ class ThreatMiner(Query):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
# 合并搜索子域名搜索结果
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
|
||||
@@ -11,7 +11,7 @@ class VirusTotal(Query):
|
||||
self.source = 'VirusTotalQuery'
|
||||
self.module = 'Intelligence'
|
||||
self.addr = 'https://www.virustotal.com/ui/domains/{}/subdomains'
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
|
||||
def query(self):
|
||||
"""
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.query import Query
|
||||
class VirusTotalAPI(Query):
|
||||
def __init__(self, domain):
|
||||
Query.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Intelligence'
|
||||
self.source = 'VirusTotalAPIQuery'
|
||||
self.addr = 'https://www.virustotal.com/vtapi/v2/domain/report'
|
||||
|
||||
@@ -30,7 +30,7 @@ class Ask(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -54,7 +54,7 @@ class Baidu(Search):
|
||||
# 获取百度跳转URL响应头的Location字段获取直链
|
||||
subdomains = self.redirect_match(domain, resp.text)
|
||||
else:
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -36,7 +36,7 @@ class Bing(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -37,7 +37,7 @@ class BingAPI(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -37,7 +37,7 @@ class FoFa(Search):
|
||||
if not resp:
|
||||
return
|
||||
resp_json = resp.json()
|
||||
subdomains = self.match_subdomains(self.domain, str(resp_json))
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -10,7 +10,7 @@ class Gitee(Search):
|
||||
self.source = 'GiteeSearch'
|
||||
self.module = 'Search'
|
||||
self.addr = 'https://search.gitee.com/'
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.header = self.get_header()
|
||||
|
||||
def search(self, full_search=False):
|
||||
@@ -34,7 +34,7 @@ class Gitee(Search):
|
||||
if 'class="empty-box"' in resp.text:
|
||||
break
|
||||
soup = BeautifulSoup(resp.text, 'html.parser')
|
||||
subdomains = self.match_subdomains(self.domain, soup.text)
|
||||
subdomains = self.match_subdomains(soup.text, fuzzy=False)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -10,7 +10,7 @@ class GithubAPI(Search):
|
||||
self.source = 'GithubAPISearch'
|
||||
self.module = 'Search'
|
||||
self.addr = 'https://api.github.com/search/code'
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.session = requests.Session()
|
||||
self.auth_url = 'https://api.github.com'
|
||||
self.token = api.github_api_token
|
||||
@@ -60,7 +60,7 @@ class GithubAPI(Search):
|
||||
if resp.status_code != 200:
|
||||
logger.log('ERROR', f'{self.source} module query failed')
|
||||
break
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains:
|
||||
break
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
@@ -40,7 +40,7 @@ class Google(Search):
|
||||
resp = self.get(url=self.addr, params=payload)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -35,7 +35,7 @@ class GoogleAPI(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -5,7 +5,7 @@ from common.search import Search
|
||||
class ShodanAPI(Search):
|
||||
def __init__(self, domain):
|
||||
Search.__init__(self)
|
||||
self.domain = self.register(domain)
|
||||
self.domain = self.get_maindomain(domain)
|
||||
self.module = 'Search'
|
||||
self.source = 'ShodanAPISearch'
|
||||
self.addr = 'https://api.shodan.io/shodan/host/search'
|
||||
@@ -25,7 +25,7 @@ class ShodanAPI(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if subdomains:
|
||||
|
||||
@@ -31,7 +31,7 @@ class So(Search):
|
||||
resp = self.get(url=self.addr, params=payload)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -28,7 +28,7 @@ class Sogou(Search):
|
||||
resp = self.get(self.addr, payload)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains:
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -36,7 +36,7 @@ class Yahoo(Search):
|
||||
if not resp:
|
||||
return
|
||||
text = resp.text.replace('<b>', '').replace('</b>', '')
|
||||
subdomains = self.match_subdomains(domain, text)
|
||||
subdomains = self.match_subdomains(text, fuzzy=False)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -36,7 +36,7 @@ class Yandex(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text, fuzzy=False)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
if not full_search:
|
||||
|
||||
@@ -48,7 +48,7 @@ class ZoomEyeAPI(Search):
|
||||
resp = self.get(self.addr, params)
|
||||
if not resp:
|
||||
return
|
||||
subdomains = self.match_subdomains(self.domain, resp.text)
|
||||
subdomains = self.match_subdomains(resp.text)
|
||||
if not subdomains: # 搜索没有发现子域名则停止搜索
|
||||
break
|
||||
self.subdomains = self.subdomains.union(subdomains)
|
||||
|
||||
Reference in New Issue
Block a user