109 lines
3.9 KiB
Python
109 lines
3.9 KiB
Python
# coding:utf-8
|
||
from __future__ import print_function
|
||
import requests
|
||
import configparser
|
||
from base64 import b64encode
|
||
import base64
|
||
|
||
import sys
|
||
|
||
from lib.core.log import loglogo,logcritical
|
||
|
||
if sys.version.split()[0].split(".")[0] == 2:
|
||
reload(sys)
|
||
sys.setdefaultencoding("utf-8")
|
||
|
||
def get_ukey(cfg_path):
|
||
cp = configparser.ConfigParser()
|
||
cp.read(cfg_path)
|
||
return [cp["Fofa"]["user"],cp["Fofa"]["key"]]
|
||
|
||
def fofa_login(user,key):
|
||
_login = False
|
||
try:
|
||
# print "https://fofa.so/api/v1/info/my?email={user}&key={key}".format(user = user,key = key)
|
||
req = requests.get("https://fofa.info/api/v1/info/my?email={user}&key={key}".format(user = user,key = key))
|
||
if req and req.status_code == 200 and "username" in req.json():
|
||
_login = True
|
||
else:
|
||
while _login == False:
|
||
err_msg = "登陆失败，请重新确认并在下方输入user和key"
|
||
logcritical(err_msg)
|
||
if sys.version.split()[0].split(".")[0] == 2:
|
||
user = raw_input("Fofa 账号：")
|
||
key = raw_input("Fofa key：")
|
||
else:
|
||
user = input("Fofa 账号：")
|
||
key = input("Fofa key：")
|
||
# print user,key
|
||
_login = fofa_login(user,key)[0]
|
||
except KeyboardInterrupt:
|
||
exit("\nUser exit")
|
||
return [True,user,key]
|
||
|
||
def ukey_save(user,key,save_path):
|
||
cp = configparser.ConfigParser()
|
||
cp.add_section("Fofa")
|
||
cp["Fofa"]["user"] = user
|
||
cp["Fofa"]["key"] = key
|
||
cp.write(open(save_path,"w"))
|
||
|
||
def fofa_search(user,key,dork,save_path):
|
||
# print "in search"
|
||
search_result = list()
|
||
url_list = list()
|
||
resource = 'protocol,ip,port'
|
||
page = 100
|
||
# dork = str(base64.b64decode(dork),encoding = "utf-8")
|
||
for i in range(1,page+1):
|
||
url = "https://fofa.info/api/v1/search/all?email={user}&key={key}&qbase64={dork}&fields={resource}&page={page}".format(
|
||
user=user, key=key, dork=b64encode(dork.encode()).decode(), resource=resource, page=i)
|
||
req = requests.get(url,timeout=80)
|
||
# 返回结果为空
|
||
if "\"results\":[],\"size\":0" in req.text:
|
||
err_msg = "\033[31m"
|
||
err_msg += "搜索语句{dork}无任何返回结果\n请前往fofa web端测试搜索语句的有效性"
|
||
err_msg += "\033[0m"
|
||
exit(err_msg.format(dork=dork,))
|
||
# break
|
||
# 语法错误
|
||
elif "\"errmsg\":\"query statement error\",\"error\":true" in req.text:
|
||
print("[PLUGIN] Fofa:{}".format(req.text))
|
||
err_msg = "\033[31m"
|
||
err_msg += "搜索语句{dork}疑似存在语法错误\n请前往fofa web端测试搜索语句的有效性"
|
||
err_msg += "\033[0m"
|
||
exit(err_msg.format(dork=dork,))
|
||
elif "\"results\":[]," in req.text:
|
||
err_msg = "\n\033[35m"
|
||
err_msg += "已无更多搜索结果\n开始保存文件"
|
||
err_msg += "\033[0m"
|
||
logcritical(err_msg)
|
||
break
|
||
# 正常情况下
|
||
elif req and req.status_code == 200 and "results" in req.json():
|
||
content = req.json()
|
||
# print len(content['results'])
|
||
for match in content['results']:
|
||
search_result.append(match)
|
||
loglogo("第{page}页获取成功".format(page = i))
|
||
else:
|
||
print("[PLUGIN] Fofa:{}".format(req.text))
|
||
continue
|
||
|
||
for i in search_result:
|
||
if i[0] != "":
|
||
url = i[0]+"://"+i[1]+":"+i[2]
|
||
elif "443" in i[2]:
|
||
url = "https://" + i[1] + ":" + i[2]
|
||
else:
|
||
url = "http://" + i[1] + ":" + i[2]
|
||
url_list.append(url)
|
||
# print len(url_list)
|
||
url_list = set(url_list)
|
||
# print len(url_list)
|
||
with open(save_path,"w") as f:
|
||
for i in url_list:
|
||
f.write(i+"\n")
|
||
return len(url_list)
|
||
|