forked from Cl0udG0d/Fofa-hack
-
Notifications
You must be signed in to change notification settings - Fork 0
/
fofa.py
160 lines (146 loc) · 6.72 KB
/
fofa.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
#!/usr/bin/env python
# -*- coding: utf-8 -*-
# @Time : 2022/9/14 22:20
# @Author : Cl0udG0d
# @File : fofa.py
# @Github: https://github.com/Cl0udG0d
import argparse
import os
import sys
import time
from core.fofaMain import FofaMain
from tookit import unit, config
from tookit.levelData import LevelData
from tookit.outputData import OutputData
from tookit.unit import clipKeyWord, outputLogo
import gettext
import locale
import mmh3
import requests
import base64
import codecs
config.ROOT_PATH = os.path.dirname(os.path.abspath(__file__))
if getattr(sys, 'frozen', None):
dir = sys._MEIPASS
else:
dir = config.ROOT_PATH
# 获取当前的语言设置
lang, _ = locale.getdefaultlocale()
if lang and lang.startswith('zh'):
# 如果是中文环境，不需要翻译，直接用原始字符串
_ = lambda x: x
else:
# 如果是其他语言环境，则加载对应的翻译文件
language = gettext.translation('fofa_hack', localedir=os.path.join(dir, "locale"), languages=['en'])
language.install()
_ = language.gettext
def main():
outputLogo()
parser = argparse.ArgumentParser(description=_("Fofa-hack v{} 使用说明").format(config.VERSION_NUM))
group = parser.add_mutually_exclusive_group(required=True)
group.add_argument('--keyword', '-k', help=_('fofa搜索关键字'))
group.add_argument('--inputfile', '-i', help=_("指定文件,从文件中批量读取fofa语法"))
group.add_argument('--base', '-b', help=_("以base64的形式输入关键字 -b InRoaW5rcGhwIg=="))
group.add_argument('--iconurl', type=str, help="指定url的icon作为icon_hash关键字")
group.add_argument('--iconfile', type=str, help="指定icon_file作为icon_hash关键字")
parser.add_argument('--timesleep', '-t', help=_('爬取每一页等待秒数,防止IP被Ban,默认为3'), default=3)
parser.add_argument('--timeout', '-to', help=_('爬取每一页的超时时间,默认为180秒'), default=180)
parser.add_argument('--endcount', '-e', help=_('爬取结束数量'))
parser.add_argument('--level', '-l', help=_('爬取等级: 1-3 ,数字越大内容越详细,默认为 1'))
parser.add_argument('--output', '-o', help=_('输出格式:txt、json,默认为txt'))
parser.add_argument('--outputname','-on', help=_("指定输出文件名，默认文件名为 fofaHack"))
parser.add_argument('--fuzz', '-f', help=_('关键字fuzz参数,增加内容获取粒度'), action='store_true')
parser.add_argument('--proxy-type',choices=['socks4','socks5', 'http'], help=_("代理类型,默认为http"),default='http')
parser.add_argument('--authorization', type=str, help="指定Authorization值")
parser.add_argument('--authorization-file', type=str, help="从文件中读取authorization列表 --authorization-file authorization.txt")
proxy_group = parser.add_mutually_exclusive_group()
proxy_group.add_argument('--proxy', help=_("指定代理,代理格式 --proxy '127.0.0.1:7890'"))
proxy_group.add_argument('--proxy-url', help=_("指定代理url，即访问URL响应为proxy,代理格式 --proxy-url http://127.0.0.1/proxy_pool/get"))
proxy_group.add_argument('--proxy-file', help=_("指定txt格式的代理文件,按行分割,代理格式 --proxy-file proxy.txt"))
# parser.add_argument('--type', type=str, choices=["common", "selenium"], default="common",
# help="运行类型,默认为普通方式")
args = parser.parse_args()
if args.authorization_file:
config.AUTHORIZATION_FILE = args.authorization_file
with open(config.AUTHORIZATION_FILE, 'r') as f:
for line in f.readlines():
config.AUTHORIZATION_LIST.append(line)
time_sleep = int(args.timesleep)
timeout = int(args.timeout)
if args.keyword:
search_key = clipKeyWord(args.keyword)
elif args.base:
try:
search_key = base64.b64decode(args.base).decode('utf-8')
except Exception as e:
print(e)
search_key = ""
pass
elif args.iconurl:
if args.iconurl.endswith(".ico"):
icon_url = args.iconurl
else :
icon_url = args.iconurl + "favicon32.ico" if args.iconurl.endswith("/") else args.iconurl + "/favicon32.ico"
try:
_icon = mmh3.hash(
codecs.lookup('base64').encode(requests.get(icon_url).content)[0])
search_key = '''icon_hash="{}"'''.format(_icon)
except:
print("icon url " + icon_url + " 访问错误")
exit(0)
elif args.iconfile:
file_path = args.iconfile
if os.path.exists(file_path):
with open(file_path, 'rb') as f:
_icon = mmh3.hash(codecs.lookup('base64').encode(f.read())[0])
search_key = '''icon_hash="{}"'''.format(_icon)
else:
search_key = ""
endcount = int(args.endcount) if args.endcount else 100
level = args.level if args.level else "1"
level_data = LevelData(level)
fuzz = args.fuzz
output = args.output if args.output else "txt"
outputname = args.outputname if args.outputname else "fofaHack"
if search_key:
# if outputname:
filename="{}.{}".format(outputname,output)
# 检查文件是否存在
if os.path.exists(filename) and os.path.exists("final_"+filename):
# 如果存在，删除文件
os.remove(filename)
os.remove("final_"+filename)
# else:
# filename = "{}_{}.{}".format(unit.md5(search_key), int(time.time()), output)
output_data = OutputData(filename, level, pattern=output)
else:
filename = _("暂无")
output_data = None
if args.proxy or args.proxy_url or args.proxy_file :
config.IS_PROXY = True
if args.proxy:
config.PROXY_SINGLE = True
config.PROXY_ARGS = args.proxy
elif args.proxy_url :
config.PROXY_FROM_URL = True
config.PROXY_ARGS = args.proxy_url
else:
config.PROXY_FROM_TXT = True
config.PROXY_ARGS = args.proxy_file
if args.proxy_type:
config.PROXY_TYPE = args.proxy_type
# is_proxy, proxy = setProxy(args.proxy,args.proxy_type)
# type = args.type
inputfile = args.inputfile if args.inputfile else None
if not inputfile and not search_key:
print(_("未输入搜索内容"))
exit(0)
if args.authorization:
# 用户输入了Authorization值
# print("用户输入的Authorization值为:", args.authorization)
config.AUTHORIZATION = args.authorization
fofa = FofaMain(search_key, inputfile, filename, time_sleep, endcount, level, level_data, output, output_data,
fuzz, timeout, config.IS_PROXY)
fofa.start()
if __name__ == '__main__':
main()