3 @6^@sDddlZddlZddlmZddlmZmZmZGdddeZdS)N) IPNetwork) SpiderFootSpiderFootPluginSpiderFootEventc@sneZdZdZddddddddZddd d d d d dZdZdZefddZ ddZ ddZ ddZ ddZ dS) sfp_robtexzbRobtex:Footprint,Investigate,Passive:Passive DNS::Search Robtex.com for hosts sharing the same IP.TFd)verifynetblocklookup maxnetblockcohostsamedomain maxcohost subnetlookup maxsubnetzMVerify co-hosts are valid by checking if they still resolve to the shared IP.zyLook up all IPs on netblocks deemed to be owned by your target for possible co-hosts on the same target subdomain/domain?zyIf looking up owned netblocks, the maximum netblock size to look up all IPs within (CIDR value, 24 = /24, 16 = /16, etc.)z>Treat co-hosted sites on the same target domain as co-hosting?zbStop reporting co-hosted sites after this many are found, as it would likely indicate web hosting.z:Look up all IPs on subnets which your target is a part of?zsIf looking up subnets, the maximum subnet size to look up all the IPs within (CIDR value, 24 = /24, 16 = /16, etc.)NrcCs>||_|j|_d|_x"t|jD]}|||j|<q$WdS)Nr)sf tempStorageresults cohostcountlistkeysopts)selfsfcuserOptsoptr5/var/www/spiderfoot.crq.systems/modules/sfp_robtex.pysetup0s  zsfp_robtex.setupcCs dddgS)N IP_ADDRESSNETBLOCK_OWNERNETBLOCK_MEMBERr)rrrr watchedEvents9szsfp_robtex.watchedEventscCsddgS)NCO_HOSTED_SITErr)rrrrproducedEvents?szsfp_robtex.producedEventscCsdgS)NZnoselfr)rrrr watchOptsCszsfp_robtex.watchOptscCs|j}|j}|j}||_|jjd|d||j|jdkrDdS|dkrl|dkrl|jjd|ddS||jkr|jjd|d dS|d kr|jd sdSt |j |jd kr|jjd t t |j dt |jd dS|dkrH|jdsdSt |j |jdkrH|jjd t t |j dt |jddSt }|j drxDt |D]"}|jt |d|jt |<qdWn|j|d|j|<t }x>|D]4}|jrdSd} xl| dkr2|jjd||jdd} | ddkrP| ddkrdS| ddkr&tjd| d7} qW| ddkr\|jjdd | d7} qytj| d} Wn0tk r} z|jjd!d dSd} ~ XnX| jd"} | sdSt| jd"dkrx| jd"D]}d#|krq|jd$s*|jj|d#dd%r*|jjd|d#d&q|jd'rl|jj|d#| rl|jjd(|d#d)|q|d krtd||j|}|j|td*|d#|j|}|j|ntd*|d#|j|}|j||jd7_qWqWdS)+NzReceived event, z, from r rrz Ignoring z , from self.z Skipping z as already mapped.rr r z$Network size bigger than permitted: z > r rr NETBLOCK_Trz#https://freeapi.robtex.com/ipquery/ _fetchtimeout)timeoutcode200404429contentzUnable to query robtex API.Fz#Error parsing JSON from robtex API.pasor )includeParentsz" because it is on the same domain.r zHost z no longer resolves to r") eventTypemoduledataZcurrentEventSrcrdebugrrrr prefixlenstrr startswithappend checkForStopfetchUrltimesleeperrorjsonloads BaseExceptiongetlen getTargetmatches validateIPr__name__notifyListeners)revent eventName srcModuleName eventDataqrylistipaddrmyresipretryresr4er/ripeevtrrr handleEventGs              "    zsfp_robtex.handleEvent)rG __module__ __qualname____doc__roptdescsrrdictrr!r#r$rWrrrrrs, r) r?r<netaddrrsflibrrrrrrrr s