shmilylty/OneForAll

from common.query import Query
import json
import os


class Crtsh(Query):
    def __init__(self, domain):
        Query.__init__(self)
        self.domain = domain
        self.module = 'Certificate'
        self.source = 'CrtshQuery'
        self.addr = 'https://crt.sh/'

    def query(self):
        """
        向接口查询子域并做子域匹配
        """
        self.header = self.get_header()
        self.proxy = self.get_proxy(self.source)
        self.timeout = 120
        params = {'q': f'%.{self.domain}', 'output': 'json'}
        resp = self.get(self.addr, params)
        if not resp:
            return
        text = resp.text.replace(r'\n', ' ')
        """
        * > altdns
        """
        subDomains = set()
        try:
            jsonData = json.loads(text)
        except Exception as e:
            pass
        for i in range(len(jsonData)):
            try:
                name_value = str(jsonData[i]['name_value'])
            except Exception as e:
                pass
            if '*' in name_value:
                try:
                    if 'certificates' in os.path.dirname(os.path.abspath(__file__)):
                        dictFile = open("../../data/altdns_wordlist.txt", "r", encoding='utf8')
                    else:
                        dictFile = open("./data/altdns_wordlist.txt", "r", encoding='utf8')
                    for line in dictFile.readlines():
                        altdns = line.strip()
                        result = name_value.replace('*', altdns)
                        if self.domain in result:
                            subDomains.add(result)
                except Exception as e:
                    pass
        if len(subDomains) > 0:
            for x in subDomains:
                text = text + ',' + x + ','
        """
        * > altdns end
        """
        subdomains = self.match_subdomains(text)
        self.subdomains.update(subdomains)

    def run(self):
        """
        类执行入口
        """
        self.begin()
        self.query()
        self.finish()
        self.save_json()
        self.gen_result()
        self.save_db()


def run(domain):
    """
    类统一调用入口

    :param str domain: 域名
    """
    query = Crtsh(domain)
    query.run()


if __name__ == '__main__':
    run('163.com')