")
self.regex_date = re.compile(r"(?msi)href='/date.*?>(\d{2})-(\d{2})-(\d{4})")
self.regex_url = re.compile(r"(?msi)href='(/exploit.*?)'")
self.regex_name = re.compile(r"(?msi)href='/exploit.*?'>([^<]*?)<")
def run(self, ):
try:
url_search = self.url.format(self.key_word)
req_worker = RequestWorker(url=url_search, data={'agree': 'Yes%2C+I+agree'},
session_url=self.session_url)
req_worker.start()
self.list_req_workers.append(req_worker)
except Exception as e:
import traceback
traceback.print_exc()
self._get_results()
def _parser(self, html):
for item in self.regex_item.finditer(html):
item_html = item.group(0)
dict_result = {}
dict_result['url'] = self.base_url + self.regex_url.search(item_html).group(1)
match_date = self.regex_date.search(item_html)
date = "{0}-{1}-{2}".format(match_date.group(3),
match_date.group(2),
match_date.group(1)
)
dict_result['date'] = date
dict_result['name'] = self.regex_name.search(item_html).group(1)
self.list_result.append(dict_result)
class Vulners(Scraper):
def __init__(self, key_word):
Scraper.__init__(self)
self.name_site = "Vulners"
self.name_class = Vulners.__name__
self.key_word = key_word
self.url_domain = "vulners.com"
self.path = "/api/v3/search/lucene/"
self.list_result = []
self.regex_date = re.compile(r"(\d{4})-(\d{2})-(\d{2})")
def run(self, ):
try:
data = {}
data['query'] = "{0} last year".format(self.key_word)
req_worker = RequestWorkerHttpLib(self.url_domain, self.path, data)
req_worker.start()
self.list_req_workers.append(req_worker)
except Exception as e:
import traceback
traceback.print_exc()
self._get_results()
def _parser(self, html):
json_data = json.loads(html)
for data in json_data['data']['search']:
dict_result = {}
dict_result['url'] = data["_source"]['href']
dict_result['name'] = data["_source"]["title"]
dict_result['date'] = self.regex_date.search(data["_source"]["published"]).group(0)
self.list_result.append(dict_result)
class NationaVulnerabilityDB(Scraper):
def __init__(self, key_word):
Scraper.__init__(self)
self.name_site = "NationaVulnerabilityDB"
self.name_class = NationaVulnerabilityDB.__name__
self.key_word = key_word
self.url = "https://web.nvd.nist.gov/view/vuln/search-results?query={0}&search_type=all&cves=on&startIndex={1}"
self.base_url = 'https://web.nvd.nist.gov/view/vuln/'
self.page_max = 60
self.list_result = []
self.regex_item = re.compile(r'(?msi)
.*?a href="detail.*?')
self.regex_name = re.compile(r'(?msi).*?Summary:.*?>([^<]*?)<')
self.regex_date = re.compile(r'(?msi).*?Summary:.*?>.*?Published:.*?>.*?(\d{1,2})\/(\d{1,2})\/(\d{4})')
self.regex_url = re.compile(r'(?msi).*?href="([^"]*?vulnId.*?)"')
def run(self, ):
for page in range(0,self.page_max+1,20):
try:
url_search = self.url.format(
self.key_word,
page
)
req_worker = RequestWorker(url_search)
req_worker.start()
self.list_req_workers.append(req_worker)
except Exception as e:
import traceback
traceback.print_exc()
self._get_results()
def _parser(self, html):
for item in self.regex_item.finditer(html):
item_html = item.group(0)
dict_results = {}
dict_results['name'] = self.regex_name.search(item_html).group(1)
match_date = self.regex_date.search(item_html)
date = "{0}-{1}-{2}".format(match_date.group(3),
match_date.group(1),
match_date.group(2)
)
dict_results['date'] = date
dict_results['url'] = self.base_url + self.regex_url.search(item_html).group(1)
self.list_result.append(dict_results)
class WpvulndbB(Scraper):
def __init__(self, key_word):
Scraper.__init__(self)
self.name_site = "Wpvulndb"
self.name_class = NationaVulnerabilityDB.__name__
self.key_word = key_word
self.url = "https://wpvulndb.com/searches?page={1}&text={0}&utf8=%E2%9C%93&vuln_type="
self.url_base = "https://wpvulndb.com"
self.page_max = 2
self.list_result = []
self.regex_item = re.compile(r'(?msi).*?| .*?')
self.regex_name = re.compile(r'(?msi)\d+?<.*?href.*?>([^<]*?)<')
self.regex_date = re.compile(r'(?msi)created-at">([^<]*?)<')
self.regex_url = re.compile(r'(?msi)\d+?<')
def run(self, ):
for page in range(self.page_max+1):
try:
url_search = self.url.format(
self.key_word,
page
)
req_worker = RequestWorker(url_search)
req_worker.start()
self.list_req_workers.append(req_worker)
except Exception as e:
import traceback
traceback.print_exc()
self._get_results()
def _parser(self, html):
for item in self.regex_item.finditer(html):
dict_results = {}
item_html = item.group(0)
url = self.url_base + self.regex_url.search(item_html).group(1)
dict_results['url'] = url
dict_results['name'] = self.regex_name.search(item_html).group(1)
dict_results['date'] = self.regex_date.search(item_html).group(1)
self.list_result.append(dict_results)
Pompem-0.2.0/pompem.py 0000664 0000000 0000000 00000002545 12750776054 0014640 0 ustar 00root root 0000000 0000000 #!/usr/bin/python
# -*- coding: utf-8 -*-
import optparse
from core.exploit_finder import ExploitFinder
from common.print_messages import HELP_MESSAGE, BASIC_INFO_MESSAGE
def main():
parser = optparse.OptionParser(add_help_option=False)
parser.add_option("-s", "--search", dest="keywords", type="string",
help="text for search", )
parser.add_option("--txt", dest="txt_out",
action="store_true", help="Generate txt output file", )
parser.add_option("--html", dest="html_out", action="store_true",
help="Generate html output file", )
parser.add_option("--update",
action="store_true", dest="update",
help="upgrade to latest version")
parser.add_option("-g", "--get",
action="store_true", dest="get_exploit",
help="Download Exploits")
parser.add_option("-h", "--help",
action="store_true", dest="help", help="-h")
args = parser.parse_args()
parameters = args[0]
if not parameters.keywords:
if parameters.help:
print (HELP_MESSAGE)
exit(0)
else:
print (BASIC_INFO_MESSAGE)
exit(0)
exploit_finder = ExploitFinder(parameters)
exploit_finder.run()
if __name__ == "__main__":
main()
Pompem-0.2.0/requirements.txt 0000775 0000000 0000000 00000000020 12750776054 0016242 0 ustar 00root root 0000000 0000000 requests==2.9.1
|