wehub-resource-sync
91 lines
2.3 KiB
Python
91 lines
2.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
from __future__ import print_function, unicode_literals, absolute_import, division
|
|
|
|
import requests
|
|
|
|
from domain_admin.log import logger
|
|
|
|
|
|
def search_domain_certificates(domain, api_key):
|
|
"""
|
|
使用 Shodan DNS domain API 查询域名证书索引
|
|
:param domain: str
|
|
:param api_key: str
|
|
:return: list
|
|
"""
|
|
if not api_key:
|
|
return []
|
|
|
|
url = "https://api.shodan.io/dns/domain/{domain}".format(domain=domain)
|
|
|
|
params = {
|
|
'key': api_key
|
|
}
|
|
|
|
try:
|
|
req = requests.get(url=url, params=params, timeout=8)
|
|
except Exception:
|
|
logger.error('shodan request failed: %s', domain)
|
|
return []
|
|
|
|
if not req.ok:
|
|
if req.status_code == 404:
|
|
return []
|
|
|
|
logger.warn('shodan request not ok: status_code=%s', req.status_code)
|
|
return []
|
|
|
|
try:
|
|
data = req.json()
|
|
except ValueError:
|
|
logger.warn('shodan response is not json, status_code=%s', req.status_code)
|
|
return []
|
|
|
|
return data.get('data', []) if isinstance(data, dict) else []
|
|
|
|
|
|
def get_certificate_by_sha1(sha1, api_key):
|
|
"""
|
|
通过证书指纹查询证书详情
|
|
:param sha1: str
|
|
:param api_key: str
|
|
:return: dict
|
|
"""
|
|
if not api_key or not sha1:
|
|
return {}
|
|
|
|
url = "https://api.shodan.io/shodan/host/search"
|
|
|
|
params = {
|
|
'key': api_key,
|
|
'query': 'ssl.cert.fingerprint:{sha1}'.format(sha1=sha1),
|
|
'facets': '',
|
|
'minify': 'false'
|
|
}
|
|
|
|
try:
|
|
req = requests.get(url=url, params=params, timeout=8)
|
|
except Exception:
|
|
logger.error('shodan cert detail request failed: %s', sha1)
|
|
return {}
|
|
|
|
if not req.ok:
|
|
logger.warn('shodan cert detail request not ok: status_code=%s', req.status_code)
|
|
return {}
|
|
|
|
try:
|
|
data = req.json()
|
|
except ValueError:
|
|
logger.warn('shodan cert detail response is not json, status_code=%s', req.status_code)
|
|
return {}
|
|
|
|
matches = data.get('matches') if isinstance(data, dict) else None
|
|
if not matches:
|
|
return {}
|
|
|
|
match = matches[0] if isinstance(matches, list) else {}
|
|
ssl_data = match.get('ssl') if isinstance(match, dict) else {}
|
|
cert = ssl_data.get('cert') if isinstance(ssl_data, dict) else {}
|
|
|
|
return cert if isinstance(cert, dict) else {}
|