3 @6^@s0ddlZddlmZmZmZGdddeZdS)N) SpiderFootSpiderFootPluginSpiderFootEventc@s~eZdZdZddddZddddZdZd Zefd d Z d d Z ddZ ddZ ddZ ddZddZddZddZdS)sfp_neutrinoapizNeutrinoAPI:Footprint,Investigate,Passive:Reputation Systems:apikey:Search NeutrinoAPI for IP address info and check IP reputation.)user_idapi_keytimeoutzNeutrinoAPI user ID.zNeutrinoAPI API key.zQuery timeout, in seconds.NFcCsD||_d|_|j|_d|_x"t|jD]}|||j|<q*WdS)NZ NeutrinoAPIF)sf__dataSource__ tempStorageresults errorStatelistkeysopts)selfsfcuserOptsoptr:/var/www/spiderfoot.crq.systems/modules/sfp_neutrinoapi.pysetup&s  zsfp_neutrinoapi.setupcCsddgS)N IP_ADDRESS PHONE_NUMBERr)rrrr watchedEvents0szsfp_neutrinoapi.watchedEventscCs dddgS)N RAW_RIR_DATAMALICIOUS_IPADDRGEOINFOr)rrrrproducedEvents4szsfp_neutrinoapi.producedEventscCs@|jjdd||jd|jdd|jd|jdd}|j|S) Nz&https://neutrinoapi.com/phone-validatejsonrr )z output-formatnumberzuser-idzapi-keyr _useragent)postDatar useragent)r fetchUrlrparseApiResponse)rqryresrrrqueryPhoneValidate9sz"sfp_neutrinoapi.queryPhoneValidatecCs@|jjdd||jd|jdd|jd|jdd}|j|S) Nzhttps://neutrinoapi.com/ip-infor!rr )z output-formatipzuser-idzapi-keyr r#)r$r r%)r r&rr')rr(r)rrr queryIpInfoBszsfp_neutrinoapi.queryIpInfocCs@|jjdd||jd|jdd|jd|jdd}|j|S) Nz$https://neutrinoapi.com/ip-blocklistr!rr )z output-formatr+zuser-idzapi-keyr r#)r$r r%)r r&rr')rr(r)rrrqueryIpBlocklistKsz sfp_neutrinoapi.queryIpBlocklistcCs@|jjdd||jd|jdd|jd|jdd}|j|S) Nz'https://neutrinoapi.com/host-reputationr!rr )z output-formathostzuser-idzapi-keyr r#)r$r r%)r r&rr')rr(r)rrrqueryHostReputationTsz#sfp_neutrinoapi.queryHostReputationcCs|ddkr$|jjddd|_dS|ddkr4dSytj|d}Wn,tk rr}z|jjddSd}~XnX|ddkr|jd r|jjd |jd dd |jd krd|_dSn|jjd ddS|S) Ncode403zAuthentication failedFTcontentzError processing JSON response.400z api-error-msgzError: ZEXCEEDzError: HTTP 400)r errorrr!loads Exceptiondebugget)rr)dataerrrr'\s(     z sfp_neutrinoapi.parseApiResponsecCs|j}|j}|j}|jrdS||jkr*dS|jddkrP|jjddd|_dS|jddkrv|jjddd|_dSd|j|<|jjd|d ||d krV|j |}|dkr|jjd |n|j d dk o|j d dk rV|j d |j d kr|j d }n|j d d|j d }t d||j |}|j |t dt||j |}|j ||dkr|j|}|dkr|jjd|np|j ddk r|j ddk r|j ddk r|j dd|j dd|j d}t d||j |}|j ||j|}|dkr|jjd|nL|j drht dd|d|j |}|j |t dt||j |}|j ||j|}|dkr|jjd|nL|j drt dd|d|j |}|j |t dt||j |}|j |dS)Nr rz7You enabled sfp_neutrinoapi but did not set an API key!FTrz6You enabled sfp_neutrinoapi but did not set a user ID!zReceived event, z, from rz No phone info results found for locationZcountryz, rrrzNo IP info results found for ZcityZregionz country-codez"No IP blocklist results found for z is-listedrz NeutrinoAPI []z%No host reputation results found for ) eventTypemoduler9rrrr r4r7r*r8r__name__notifyListenersstrr,r-r/)revent eventName srcModuleName eventDatar9r;evtrrr handleEventxsj          0&          zsfp_neutrinoapi.handleEvent)r? __module__ __qualname____doc__roptdescsrrdictrrr r*r,r-r/r'rGrrrrrs$    r)r!sflibrrrrrrrrs