3
@6^3 @ s0 d dl Z d dlmZmZmZ G dd deZdS ) N)
SpiderFootSpiderFootPluginSpiderFootEventc @ sZ e Zd ZdZdddZdddZdZdZe fdd Z d
d Z
d d
Z dd Z dd Z
dS ) sfp_zonehzZone-H Defacement Check:Investigate,Passive:Leaks, Dumps and Breaches::Check if a hostname/domain appears on the zone-h.org 'special defacements' RSS feed.T) checkcohostscheckaffiliateszCheck co-hosted sites?zCheck affiliates?NFc C s> || _ | j | _d| _x"t|j D ]}|| | j|< q$W d S )NF)sf tempStorageresults
errorStatelistkeysopts)selfsfcuserOptsopt r 4/var/www/spiderfoot.crq.systems/modules/sfp_zoneh.pysetup) s
zsfp_zoneh.setupc C s dddddgS )N
INTERNET_NAME
IP_ADDRESSAFFILIATE_INTERNET_NAMEAFFILIATE_IPADDRCO_HOSTED_SITEr )r r r r
watchedEvents6 s zsfp_zoneh.watchedEventsc C s dddddgS )NDEFACED_INTERNET_NAMEDEFACED_IPADDR DEFACED_AFFILIATE_INTERNET_NAMEDEFACED_COHOSTDEFACED_AFFILIATE_IPADDRr )r r r r producedEvents> s zsfp_zoneh.producedEventsc C sV t jd|}xD|D ]<}||d kr| jjd|d |d d |d d S qW dS )NzS<\!\[CDATA\[(.[^\]]*)\]\]>\s+<\!\[CDATA\[(.[^\]]*)\]\]>r zFound zoneh site: z
zF)refindallr info)r targetcontentgrpsmr r r
lookupItemC s
zsfp_zoneh.lookupItemc C s~ |j }|j}|j}| jjd| d | | jr4d S || jkrV| jjd| d d S d| j|< |dkrx| jd rxd S |dks|d kr| jd
rd S d }|d krd
}|dkrd}|dkrd}|d krd}| j rd S d}| jj dd}|d krN| jj
|| jd d}|d d kr4| jj d| d d| _d S | jj d|d |d }| j
||} | rzt|| | j|}
| j|
d S )NzReceived event, z, from z Skipping z, already checked.Tr r r r r r r r r r r z-https://www.zone-h.org/rss/specialdefacementsZsfzoneh0
_useragent) useragentr' zUnable to fetch F) eventTypemoduledatar debugr r
r checkForStopcacheGetfetchUrlerrorcachePutr* r __name__notifyListeners) r event eventName
srcModuleName eventDataevtTypeurlr' r0 retevtr r r handleEventM sP
zsfp_zoneh.handleEvent)r7
__module__ __qualname____doc__r optdescsr
r dictr r r! r* rA r r r r r s
r )r# sflibr r r r r r r r s