diff --git a/Config/config_api.py b/Config/config_api.py index fea5647..1162645 100644 --- a/Config/config_api.py +++ b/Config/config_api.py @@ -7,6 +7,7 @@ | _ < (_| | |_) | |_) | | |_| | | | (_| \__ \ < |_| \_\__,_|_.__/|_.__/|_|\__|_| |_|\__,_|___/_|\_\ ''' +# Seek 配置信息 ######################################################################################################################## # Shodan 配置信息 Shodan 一美元账户最高设置为1000 @@ -14,8 +15,14 @@ SHODAN_API_KEY = '' ######################################################################################################################## -# Seek 配置信息 +# Fofa 配置信息 FOFA_EAMIL='' FOFA_API_KEY='' ######################################################################################################################## + +# Hunter 配置信息 +HUNTER_USERNAME='' +HUNTER_API_KEY='' + +######################################################################################################################## \ No newline at end of file diff --git a/Framework/console_main.py b/Framework/console_main.py index bdf37af..5bef920 100644 --- a/Framework/console_main.py +++ b/Framework/console_main.py @@ -9,10 +9,10 @@ ''' import argparse -from Config.config_api import FOFA_API_KEY, SHODAN_API_KEY +from Config.config_api import FOFA_API_KEY, SHODAN_API_KEY, HUNTER_API_KEY from Config.config_print import status_print from Framework import console_attack -from Seek import fofaapi, shodanapi +from Seek import fofaapi, shodanapi, hunterapi from Framework.console_attack import get_urls from Framework.console_list import moudle_list, payload_list, payload_list_all from Moudle.Moudle_index import * @@ -38,6 +38,7 @@ def Console(): #资产爬取模块 M_SEEK.add_argument("-fofa", dest='fofa',help="资产爬取") + M_SEEK.add_argument("-hunter", dest='hunter',help="资产爬取") M_SEEK.add_argument("-shodan", dest='shodan',help="资产爬取") M_SEEK.add_argument("-num", dest='num',help="资产数量") @@ -56,10 +57,10 @@ def Console(): fofaapi.run(args.fofa,1000) else: status_print("如需使用FofaAPI，请在Config/config_api下完成相关配置",2) - except: - status_print("如需使用FofaAPI，请在Config/config_api下完成相关配置",2) + except Exception as e: + status_print("FofaAPI发生错误，%s"%e,3) elif args.shodan: - # try: + try: if SHODAN_API_KEY: if args.num and int(args.num) > 1000: status_print("Num Don't > 1000 PLS~",2) @@ -69,8 +70,21 @@ def Console(): shodanapi.run(args.shodan,1000) else: status_print("如需使用ShodanAPI，请在Config/config_api下完成相关配置",2) - # except: - # print("如需使用ShodanAPI，请在Config/config_api下完成相关配置") + except Exception as e: + status_print("ShodanAPI发生错误，%s" % e, 3) + elif args.hunter: + try: + if HUNTER_API_KEY: + if args.num and int(args.num) > 10000: + status_print("Num Don't > 10000 PLS~",2) + elif args.num and int(args.num) <= 1000: + hunterapi.run(args.hunter, args.num) + else: + hunterapi.run(args.hunter,1000) + else: + status_print("如需使用HunterAPI，请在Config/config_api下完成相关配置",2) + except Exception as e: + status_print("HunterAPI发生错误，%s" % e, 3) elif args.poc: try: if args.url: @@ -108,6 +122,8 @@ def Console(): "\n\tpython Meppo.py -m xxx -f targets.txt\t\t多目标 模块监测" "\n\tpython Meppo.py -fofa APP=\"DEMO\"\t\tFOFA API 报告导出 num默认1000" "\n\tpython Meppo.py -fofa APP=\"DEMO\" -num 100\tFOFA API 报告导出 自定义数量" + "\n\tpython Meppo.py -hunter APP=\"DEMO\"\t\tHUNTER API 报告导出 num默认1000" + "\n\tpython Meppo.py -hunter APP=\"DEMO\" -num 100\tSHODAN HUNTER 报告导出 自定义数量" "\n\tpython Meppo.py -shodan APP=\"DEMO\"\t\tSHODAN API 报告导出 num默认1000" "\n\tpython Meppo.py -shodan APP=\"DEMO\" -num 100\tSHODAN API 报告导出 自定义数量",5) diff --git a/README.md b/README.md index 8028810..9d6e2d2 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,8 @@ Usage: python Meppo.py -m xxx -f targets.txt 多目标 模块监测 python Meppo.py -fofa APP="DEMO" FOFA API 报告导出 num默认1000 python Meppo.py -fofa APP="DEMO" -num 100 FOFA API 报告导出 自定义数量 + python Meppo.py -hunter APP="DEMO" HUNTER API 报告导出 num默认1000 + python Meppo.py -hunter APP="DEMO" -num 100 SHODAN HUNTER 报告导出 自定义数量 python Meppo.py -shodan APP="DEMO" SHODAN API 报告导出 num默认1000 python Meppo.py -shodan APP="DEMO" -num 100 SHODAN API 报告导出 自定义数量 @@ -63,8 +65,10 @@ options: 资产爬取模块: -fofa FOFA 资产爬取 + -hunter HUNTER 资产爬取 -shodan SHODAN 资产爬取 -num NUM 资产数量 + ``` ```angular2html _____ diff --git a/Seek/hunterapi.py b/Seek/hunterapi.py new file mode 100644 index 0000000..d6d3396 --- /dev/null +++ b/Seek/hunterapi.py @@ -0,0 +1,77 @@ +import base64 +import datetime +from time import sleep + +import requests +from Config.config_api import HUNTER_USERNAME, HUNTER_API_KEY +from Config.config_decorators import Save_Csv +from Config.config_print import status_print + +start_time=((datetime.datetime.now() - datetime.timedelta(365)).strftime("%Y-%m-%d %H:%M:%S")) +end_time=(datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S")) + + +def huntersearch(keyword,page,size): + reslist=[] + bkeyword = bytes(keyword, encoding="utf8") + bs64 = base64.urlsafe_b64encode(bkeyword) + bs64 = bs64.decode() + res=requests.get('https://hunter.qianxin.com/openApi/search?username={}&api-key={}&search={}&page={}&page_size={}&is_web=1&start_time={}&end_time={}'.format(HUNTER_USERNAME,HUNTER_API_KEY,bs64,str(page),str(size),start_time,end_time)) + result = res.json()['data'] + for i in result['arr']: + dic = {} + dic['host'] = i['url'] + dic['ip'] = i['ip'] + dic['port'] = i['port'] + dic['country'] = i['country'] + dic['city'] = i['city'] + server='' + try: + for j in i['component']: + server=server+j['name']+" : "+j['version']+'\t' + except: + pass + dic['server'] = server + dic['title'] = i['web_title'] + reslist.append(dic) + print(dic) + + consume_quota=result['consume_quota'] + rest_quota=result['rest_quota'] + status_print(consume_quota +'\t'+rest_quota,0) + return reslist,result['total'] + +def hunterapi(keyword,num): + reslist=[] + if int(num)<= 100: + reslist = reslist + huntersearch(keyword,1,num)[0] + else: + a,b=huntersearch(keyword, 1, 100) + reslist = reslist + a + + + tmp=int(b) // 100 + if tmp == 0: + pages = (int(b) // 100) + else: + pages = (int(b) // 100) + 1 + tmp=int(num) % 100 + if tmp == 0 : + needpage = (int(num) // 100) + else: + needpage = (int(num) // 100) + 1 + sleep(3) + for i in range(pages): + + if i + 2 > needpage: + break + sleep(3) + reslist = reslist + huntersearch(keyword, i + 2,100)[0] + return reslist + +@Save_Csv +def run(keyword,num): + return hunterapi(keyword,num) + +if __name__ == '__main__': + (hunterapi('title="北京"',1)) \ No newline at end of file