OneForAll-mirror/oneforall/modules/check/csp.py

# coding=utf-8
"""
检查内容安全策略收集子域名收集子域名
"""
import time
import queue
from config import logger
from common import utils
from common.module import Module


class CheckCSP(Module):
    """
    检查内容安全策略收集子域名
    """
    def __init__(self, domain, header):
        Module.__init__(self)
        self.domain = self.register(domain)
        self.module = 'Check'
        self.source = 'Content-Security-Policy'
        self.header = header

    def check(self):
        """
        正则匹配响应头中的内容安全策略字段以发现子域名
        """
        if not self.header:
            url = f'http://www.{self.domain}'
            resp = self.get(url)
            if not resp:
                return
            self.header = resp.headers
        csp = self.header.get('Content-Security-Policy')
        if not csp:
            logger.log('DEBUG', f'{self.domain}域的响应头不存在内容安全策略字段')
            return
        logger.log('DEBUG', f'{self.domain}域的响应头存在内容安全策略字段')
        self.subdomains = utils.match_subdomain(self.domain, csp)

    def run(self, rx_queue):
        """
        类执行入口
        """
        logger.log('DEBUG', f'开始执行{self.source}检查{self.domain}域响应头中的内容安全策略字段')
        start = time.time()
        self.check()
        end = time.time()
        self.elapsed = round(end - start, 1)
        logger.log('DEBUG', f'结束执行{self.source}检查{self.domain}域响应头中的内容安全策略字段')
        self.save_json()
        self.gen_result()
        self.save_db()
        rx_queue.put(self.results)


def do(domain, rx_queue, header=None):  # 统一入口名字 方便多线程调用
    """
    类统一调用入口

    :param str domain: 域名
    :param rx_queue: 结果集队列
    :param dict or None header: 响应头
    """
    check = CheckCSP(domain, header)
    check.run(rx_queue)
    logger.log('INFOR', f'{check.source}模块耗时{check.elapsed}秒发现子域{len(check.subdomains)}个')
    logger.log('DEBUG', f'{check.source}模块发现的子域 {check.subdomains}')


if __name__ == '__main__':
    import requests
    # resp = requests.get('https://content-security-policy.com/')
    result_queue = queue.Queue()
    resp = requests.get('https://www.baidu.com/')
    do('google-analytics.com', result_queue, resp.headers)