feat: support fanruan sec notice (#12)

2025-09-24 17:14:29 +08:00
parent 4e6ccbbd8d
commit 0a66f00e57
3 changed files with 160 additions and 2 deletions
--- a/README.md
+++ b/README.md
@@ -22,6 +22,7 @@ VulnFeed 是一个用于收集和推送高价值漏洞和补丁公告信息的
 | 用友安全中心          | <https://security.yonyou.com/#/home>                        | 近三条数据                                         |
 | 泛微ECOLOGY安全补丁包 | <https://www.weaver.com.cn/cs/securityDownload.html?src=cn> | "EC9.0全量补丁", "EC8.0全量补丁", "EC10.0安全补丁" |
 | Smartbi安全补丁包     | <https://www.smartbi.com.cn/patchinfo>                      | 近三条数据                                         |
+| 帆软安全漏洞声明      | <https://help.fanruan.com/finereport/doc-view-4833.html>    | 近三条数据                                         |

 ![app](./images/app.jpg)

--- a/src/output/plugins/sec_notice/fanruan.rs
+++ b/src/output/plugins/sec_notice/fanruan.rs
@@ -0,0 +1,154 @@
+use async_trait::async_trait;
+use mea::mpsc::UnboundedSender;
+use scraper::{ElementRef, Html, Selector};
+use sha2::{Digest, Sha256};
+
+use crate::{
+    AppResult,
+    domain::models::security_notice::{CreateSecurityNotice, RiskLevel},
+    errors::Error,
+    output::plugins::sec_notice::{SecNoticePlugin, register_sec_notice},
+    utils::http_client::HttpClient,
+};
+
+const FANRUAN_NOTICE_URL: &str = "https://help.fanruan.com/finereport/doc-view-4833.html";
+
+#[derive(Debug, Clone)]
+pub struct FanRuanNoticePlugin {
+    name: String,
+    display_name: String,
+    link: String,
+    http_client: HttpClient,
+    sender: UnboundedSender<CreateSecurityNotice>,
+}
+
+#[async_trait]
+impl SecNoticePlugin for FanRuanNoticePlugin {
+    fn get_name(&self) -> String {
+        self.name.to_string()
+    }
+
+    fn get_display_name(&self) -> String {
+        self.display_name.to_string()
+    }
+
+    fn get_link(&self) -> String {
+        self.link.to_string()
+    }
+
+    async fn update(&self, _page_limit: i32) -> AppResult<()> {
+        let notices = self.parse_security_notices().await?;
+        for notice in notices {
+            let create_security_notice = CreateSecurityNotice {
+                key: self.generate_patch_key(&notice.date, &notice.description),
+                title: notice.description,
+                product_name: "帆软".to_string(),
+                risk_level: RiskLevel::High.to_string(),
+                source: self.link.clone(),
+                source_name: self.get_name(),
+                is_zero_day: false,
+                publish_time: notice.date,
+                detail_link: self.link.clone(),
+                pushed: false,
+            };
+            self.sender.send(create_security_notice).map_err(|e| {
+                Error::Message(format!("Failed to send security notice to queue: {}", e))
+            })?;
+        }
+        Ok(())
+    }
+}
+
+impl FanRuanNoticePlugin {
+    pub fn try_new(
+        sender: UnboundedSender<CreateSecurityNotice>,
+    ) -> AppResult<FanRuanNoticePlugin> {
+        let http_client = HttpClient::try_new()?;
+        let fanruan = FanRuanNoticePlugin {
+            name: "FanRuanPlugin".to_string(),
+            display_name: "帆软安全公告".to_string(),
+            link: FANRUAN_NOTICE_URL.to_string(),
+            http_client,
+            sender,
+        };
+        register_sec_notice(fanruan.name.clone(), Box::new(fanruan.clone()));
+        Ok(fanruan)
+    }
+
+    async fn get_document(&self, url: &str) -> AppResult<Html> {
+        let content = self.http_client.get_html_content(url).await?;
+        let document = Html::parse_document(&content);
+        Ok(document)
+    }
+
+    fn generate_patch_key(&self, date: &str, description: &str) -> String {
+        let mut hasher = Sha256::new();
+        hasher.update(date.as_bytes());
+        hasher.update(description.as_bytes());
+        let result = hasher.finalize();
+
+        format!("{:x}", result)
+    }
+
+    async fn parse_security_notices(&self) -> AppResult<Vec<FanRuanSecurityNotice>> {
+        let document = self.get_document(&self.link).await?;
+
+        let h3_selector = Selector::parse("h3")
+            .map_err(|e| Error::Message(format!("Failed to parse CSS selector: {}", e)))?;
+        let h3_elements: Vec<_> = document.select(&h3_selector).collect();
+
+        let target_h3 = h3_elements
+            .iter()
+            .find(|element| element.text().collect::<String>().contains("1.1 版本"));
+
+        if target_h3.is_none() {
+            return Ok(Vec::new());
+        }
+
+        let mut siblings = target_h3.unwrap().next_siblings();
+        let table_element = siblings
+            .find_map(|node| ElementRef::wrap(node).filter(|el| el.value().name() == "table"));
+
+        if table_element.is_none() {
+            return Ok(Vec::new());
+        }
+
+        let mut notices = Vec::new();
+        let row_selector = Selector::parse("tr")
+            .map_err(|e| Error::Message(format!("Failed to parse CSS selector: {}", e)))?;
+        let rows: Vec<_> = table_element.unwrap().select(&row_selector).collect();
+
+        for (_, row) in rows.iter().enumerate().skip(1) {
+            let cell_selector = Selector::parse("td")
+                .map_err(|e| Error::Message(format!("Failed to parse CSS selector: {}", e)))?;
+            let cells: Vec<_> = row.select(&cell_selector).collect();
+
+            if cells.len() >= 2 {
+                let date = cells[0].text().collect::<String>().trim().to_string();
+                let description = cells[1]
+                    .text()
+                    .collect::<Vec<_>>()
+                    .join("")
+                    .trim()
+                    .to_string();
+                notices.push(FanRuanSecurityNotice { date, description });
+
+                if notices.len() >= 3 {
+                    break;
+                }
+            }
+
+            if notices.len() >= 3 {
+                break;
+            }
+        }
+
+        Ok(notices)
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct FanRuanSecurityNotice {
+    pub date: String,
+    pub description: String,
+}
--- a/src/output/plugins/sec_notice/mod.rs
+++ b/src/output/plugins/sec_notice/mod.rs
@@ -1,3 +1,4 @@
+pub mod fanruan;
 pub mod smartbi;
 pub mod weaver;
 pub mod yongyou;
@@ -13,7 +14,8 @@ use crate::{
    AppResult,
    domain::models::security_notice::CreateSecurityNotice,
    output::plugins::sec_notice::{
-        smartbi::SmartbiNoticePlugin, weaver::WeaverNoticePlugin, yongyou::YongYouNoticePlugin,
+        fanruan::FanRuanNoticePlugin, smartbi::SmartbiNoticePlugin, weaver::WeaverNoticePlugin,
+        yongyou::YongYouNoticePlugin,
    },
 };

@@ -24,7 +26,8 @@ lazy_static! {
 pub fn init(sender: UnboundedSender<CreateSecurityNotice>) -> AppResult<()> {
    YongYouNoticePlugin::try_new(sender.clone())?;
    WeaverNoticePlugin::try_new(sender.clone())?;
-    SmartbiNoticePlugin::try_new(sender)?;
+    SmartbiNoticePlugin::try_new(sender.clone())?;
+    FanRuanNoticePlugin::try_new(sender.clone())?;
    Ok(())
 }