from config import settings from common.query import Query class RiskIQ(Query): def __init__(self, domain): Query.__init__(self) self.domain = domain self.module = 'Intelligence' self.source = 'RiskIQAPIQuery' self.addr = 'https://api.passivetotal.org/v2/enrichment/subdomains' self.user = settings.riskiq_api_username self.key = settings.riskiq_api_key def query(self): """ 向接口查询子域并做子域匹配 """ self.header = self.get_header() self.proxy = self.get_proxy(self.source) params = {'query': self.domain} resp = self.get(url=self.addr, params=params, auth=(self.user, self.key)) if not resp: return data = resp.json() names = data.get('subdomains') self.subdomains = set(map(lambda sub: f'{sub}.{self.domain}', names)) def run(self): """ 类执行入口 """ if not self.check(self.user, self.key): return self.begin() self.query() self.finish() self.save_json() self.gen_result() self.save_db() def run(domain): """ 类统一调用入口 :param str domain: 域名 """ query = RiskIQ(domain) query.run() if __name__ == '__main__': run('example.com')