U
@6^A @ s< d dl mZmZmZ ddddgddiZG dd d eZd
S ) )
SpiderFootSpiderFootPluginSpiderFootEventz hosts-file.net Malicious Hosts_hphostslistdomainz(http://hosts-file.net/download/hosts.txt)idtypechecksurlc @ sd e Zd ZdZdddddZddddZd Ze fd
d Zd d
Z dd Z
dd Z dd Z dd Z
d S )sfp_hostsfilenetzhosts-file.net Malicious Hosts:Investigate,Passive:Reputation Systems::Check if a host/domain is malicious according to hosts-file.net Malicious Hosts.T )r checkaffiliates checkcohosts cacheperiodzApply checks to affiliates?z?Apply checks to sites found to be co-hosted on the target's IP?z,Hours to cache list data before re-fetching.)r r r Nc C s4 || _ | | _t| D ]}|| | j|< q d S )N)sf tempStorageresultsr keysopts)selfsfcuserOptsopt r ;/var/www/spiderfoot.crq.systems/modules/sfp_hostsfilenet.pysetup0 s
zsfp_hostsfilenet.setupc C s
dddgS )N
INTERNET_NAMEAFFILIATE_INTERNET_NAMECO_HOSTED_SITEr r r r r
watchedEvents< s z sfp_hostsfilenet.watchedEventsc C s
dddgS )NMALICIOUS_INTERNET_NAME!MALICIOUS_AFFILIATE_INTERNET_NAMEMALICIOUS_COHOSTr r r r r producedEventsB s z sfp_hostsfilenet.producedEventsc C s d}|dkr | j || jd }tt D ]T}t| d }||kr,t| d dkr,t }t| d }| j d| | jd d
|d < |d d kr| j j || jd | jd
d}|d d kr| j
d| d d S | j d| |d t |d t
krt
|d |d < |dkrNd| d |d krN| j |d | d | S d| d |d kr,| j |d | d | S q,d S )N r
_internettldsr r r r sfmal_r r content
_fetchtimeout
_useragent)timeout useragentzUnable to fetch Fz
127.0.0.1
z
found in z list.)r
hostDomainr r malchecksr dictcacheGetgetfetchUrlerrorcachePutr strdebug) r r target
targetType targetDomcheckciddatar r r r resourceListG s0
z sfp_hostsfilenet.resourceListc C s| t t D ]j}t| d }||kr |t| d kr | jd| d | d | t| d dkr | ||| S q d S )Nr r
zChecking maliciousness of z (z) with: r r )r r0 r r r8 r? )r
resourceIditemTyper9 r< r= r r r
lookupItemg s zsfp_hostsfilenet.lookupItemc C s@ |j }|j}|j}| jd| d | || jkrL| jd| d d S d| j|< |dkrp| jddspd S |d kr| jd
dsd S tt
D ]}t | d }| j| r|d krd
}|dkrd}|d krd}|dkrd}| r d S | |||} | d k r|d | d d | d }
t
||
| j|} | | qd S )NzReceived event, z, from z Skipping z, already checked.Tr r Fr r r )r r r r r r" r# r$ z [z]
zz) eventTypemoduler> r r8 r r r3 r r0 r checkForStoprB r __name__notifyListeners) r event eventName
srcModuleName eventDatar< r= typeIdevtTyper textevtr r r handleEvents sB
z sfp_hostsfilenet.handleEvent)rF
__module__ __qualname____doc__r optdescsr r1 r r! r% r? rB rP r r r r r s" r N)sflibr r r r0 r r r r r
s