mirror of
https://github.com/shmilylty/OneForAll.git
synced 2026-08-26 04:47:48 +08:00
85 lines
2.3 KiB
Python
85 lines
2.3 KiB
Python
from common.query import Query
|
|
import json
|
|
import os
|
|
|
|
|
|
class Crtsh(Query):
|
|
def __init__(self, domain):
|
|
Query.__init__(self)
|
|
self.domain = domain
|
|
self.module = 'Certificate'
|
|
self.source = 'CrtshQuery'
|
|
self.addr = 'https://crt.sh/'
|
|
|
|
def query(self):
|
|
"""
|
|
向接口查询子域并做子域匹配
|
|
"""
|
|
self.header = self.get_header()
|
|
self.proxy = self.get_proxy(self.source)
|
|
self.timeout = 120
|
|
params = {'q': f'%.{self.domain}', 'output': 'json'}
|
|
resp = self.get(self.addr, params)
|
|
if not resp:
|
|
return
|
|
text = resp.text.replace(r'\n', ' ')
|
|
"""
|
|
* > altdns
|
|
"""
|
|
subDomains = set()
|
|
try:
|
|
jsonData = json.loads(text)
|
|
except Exception as e:
|
|
pass
|
|
for i in range(len(jsonData)):
|
|
try:
|
|
name_value = str(jsonData[i]['name_value'])
|
|
except Exception as e:
|
|
pass
|
|
if '*' in name_value:
|
|
try:
|
|
if 'certificates' in os.path.dirname(os.path.abspath(__file__)):
|
|
dictFile = open("../../data/altdns_wordlist.txt", "r", encoding='utf8')
|
|
else:
|
|
dictFile = open("./data/altdns_wordlist.txt", "r", encoding='utf8')
|
|
for line in dictFile.readlines():
|
|
altdns = line.strip()
|
|
result = name_value.replace('*', altdns)
|
|
if self.domain in result:
|
|
subDomains.add(result)
|
|
except Exception as e:
|
|
pass
|
|
if len(subDomains) > 0:
|
|
for x in subDomains:
|
|
text = text + ',' + x + ','
|
|
"""
|
|
* > altdns end
|
|
"""
|
|
subdomains = self.match_subdomains(text)
|
|
self.subdomains.update(subdomains)
|
|
|
|
def run(self):
|
|
"""
|
|
类执行入口
|
|
"""
|
|
self.begin()
|
|
self.query()
|
|
self.finish()
|
|
self.save_json()
|
|
self.gen_result()
|
|
self.save_db()
|
|
|
|
|
|
def run(domain):
|
|
"""
|
|
类统一调用入口
|
|
|
|
:param str domain: 域名
|
|
"""
|
|
query = Crtsh(domain)
|
|
query.run()
|
|
|
|
|
|
if __name__ == '__main__':
|
|
run('163.com')
|