Files
OneForAll-mirror/modules/search/hunter_api.py
T
lovelyjuice 4d1e0610b1 1. 增加空间测绘引擎最大查询数量限制,防止泛解析和CDN浪费积分。对 fofa, hunter, quake, zoomeye 生效
2. 允许用户不使用 tldextract 提取主域名,防止收集分公司域名时错误收集到主公司的域名
3. 升级exrex版本,兼容python3.12
4. 修复`No module named 'distutils.util'`的bug,关联issue: https://github.com/shmilylty/OneForAll/issues/394
2024-09-10 12:17:13 +08:00

73 lines
2.0 KiB
Python

import base64
import time
from config import settings
from common.search import Search
class Hunter(Search):
def __init__(self, domain):
Search.__init__(self)
self.domain = domain
self.module = 'Search'
self.source = 'HunterAPISearch'
self.addr = 'https://hunter.qianxin.com/openApi/search'
self.delay = 1
self.key = settings.hunter_api_key
def search(self):
"""
发送搜索请求并做子域匹配
"""
self.page_num = 1
subdomain_encode = f'domain_suffix="{self.domain}"'.encode('utf-8')
query_data = base64.b64encode(subdomain_encode)
while 100 * self.page_num < settings.cam_records_maximum_per_domain:
time.sleep(self.delay)
self.header = self.get_header()
self.proxy = self.get_proxy(self.source)
query = {'api-key': self.key,
'search': query_data,
'page': self.page_num,
'page_size': 100,
'is_web': 1}
resp = self.get(self.addr, query)
if not resp:
return
resp_json = resp.json()
subdomains = self.match_subdomains(resp)
if not subdomains: # 搜索没有发现子域名则停止搜索
break
self.subdomains.update(subdomains)
total = resp_json.get('data').get('total')
if self.page_num * 100 >= int(total):
break
self.page_num += 1
def run(self):
"""
类执行入口
"""
if not self.have_api(self.key):
return
self.begin()
self.search()
self.finish()
self.save_json()
self.gen_result()
self.save_db()
def run(domain):
"""
类统一调用入口
:param str domain: 域名
"""
search = Hunter(domain)
search.run()
if __name__ == '__main__':
run('freebuf.com')