233 lines
8.9 KiB
Python
233 lines
8.9 KiB
Python
#!/usr/bin/python3
|
||
# -*- coding:utf-8 -*-
|
||
# @Author : yhy
|
||
|
||
# 每3分钟检测一次github是否有新的cve漏洞提交记录，若有则通过server酱和钉钉机器人推送（二者配置一个即可）
|
||
# 建议使用screen命令运行在自己的linux vps后台上，就可以愉快的接收各种cve了
|
||
|
||
# https://my.oschina.net/u/4581868/blog/4380482
|
||
# https://github.com/kiang70/Github-Monitor
|
||
|
||
import requests, time
|
||
import dingtalkchatbot.chatbot as cb
|
||
import datetime
|
||
import hashlib
|
||
from lxml import etree
|
||
import traceback
|
||
|
||
|
||
github_headers = {
|
||
'Authorization': "token xxxxxx" #替换自己的github token https://github.com/settings/tokens/new
|
||
}
|
||
|
||
# 抓取本年cve
|
||
def getNews():
|
||
try:
|
||
# 抓取本年的
|
||
year = datetime.datetime.now().year
|
||
api = "https://api.github.com/search/repositories?q=CVE-{}&sort=updated".format(year)
|
||
json_str = requests.get(api, headers = github_headers, timeout= 10).json()
|
||
cve_total_count = json_str['total_count']
|
||
cve_description = json_str['items'][0]['description']
|
||
cve_url = json_str['items'][0]['html_url']
|
||
return cve_total_count, cve_description, cve_url
|
||
|
||
except Exception as e:
|
||
print(e, "github链接不通")
|
||
return '', '', ''
|
||
|
||
# 通过 pushed_at 检查工具是否更新
|
||
def get_pushed_at_time(tools_list):
|
||
total_list = []
|
||
for url in tools_list:
|
||
pushed_at = requests.get(url, headers = github_headers, timeout= 10).json()['pushed_at']
|
||
total_list.append(pushed_at)
|
||
|
||
return total_list
|
||
|
||
def get_update_log(url):
|
||
# 考虑到有的工具没有 releases, 则通过 commits 记录获取更新描述
|
||
|
||
# 判断是否有 releases 记录
|
||
json_str = requests.get(url + '/releases', headers = github_headers, timeout= 10).json()
|
||
if len(json_str) != 0:
|
||
update_log = json_str[0]['body']
|
||
download_url = json_str[0]['html_url']
|
||
return update_log, download_url
|
||
else:
|
||
json_str = requests.get(url + '/commits', headers = github_headers, timeout= 10).json()
|
||
update_log = json_str[0]['commit']['message']
|
||
return update_log, ''
|
||
|
||
|
||
# 创建md5对象
|
||
def nmd5(str):
|
||
m = hashlib.md5()
|
||
b = str.encode(encoding='utf-8')
|
||
m.update(b)
|
||
str_md5 = m.hexdigest()
|
||
return str_md5
|
||
|
||
# 有道翻译
|
||
def translate(word):
|
||
headerstr = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36'
|
||
bv = nmd5(headerstr)
|
||
lts = str(round(time.time()*1000))
|
||
salt = lts + '90'
|
||
|
||
# 如果翻译失败，{'errorCode': 50} 请查看 fanyi.min.js: https://shared.ydstatic.com/fanyi/newweb/v1.1.7/scripts/newweb/fanyi.min.js
|
||
# 搜索 fanyideskweb sign: n.md5("fanyideskweb" + e + i + "Y2FYu%TNSbMCxc3t2u^XT") ，Y2FYu%TNSbMCxc3t2u^XT是否改变，替换即可
|
||
strexample = 'fanyideskweb' + word + salt + 'Y2FYu%TNSbMCxc3t2u^XT'
|
||
sign = nmd5(strexample)
|
||
|
||
data = {
|
||
'i': word,
|
||
'from': 'AUTO',
|
||
'to': 'AUTO',
|
||
'smartresult': 'dict',
|
||
'client': 'fanyideskweb',
|
||
'salt':salt,
|
||
'sign':sign,
|
||
'lts': lts,
|
||
'bv': bv,
|
||
'doctype': 'json',
|
||
'version': '2.1',
|
||
'keyfrom': 'fanyi.web',
|
||
'action': 'FY_BY_CLICKBUTTION',
|
||
}
|
||
url='http://fanyi.youdao.com/translate_o?smartresult=dict&smartresult=rule'
|
||
|
||
header={
|
||
'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36',
|
||
'Referer':'http://fanyi.youdao.com/',
|
||
'Origin': 'http://fanyi.youdao.com',
|
||
'Content-Type':'application/x-www-form-urlencoded; charset=UTF-8',
|
||
'X-Requested-With':'XMLHttpRequest',
|
||
'Accept':'application/json, text/javascript, */*; q=0.01',
|
||
'Accept-Encoding':'gzip, deflate',
|
||
'Accept-Language':'zh-CN,zh;q=0.9',
|
||
'Connection': 'keep-alive',
|
||
'Host': 'fanyi.youdao.com',
|
||
'cookie':'_ntes_nnid=937f1c788f1e087cf91d616319dc536a,1564395185984; OUTFOX_SEARCH_USER_ID_NCOO=; OUTFOX_SEARCH_USER_ID=-10218418@11.136.67.24; JSESSIONID=; ___rl__test__cookies=1'
|
||
}
|
||
|
||
res = requests.post(url=url, data=data, headers=header)
|
||
result_dict = res.json()
|
||
|
||
result = ""
|
||
for json_str in result_dict['translateResult'][0]:
|
||
tgt = json_str['tgt']
|
||
result += tgt
|
||
return result
|
||
|
||
|
||
# 钉钉
|
||
def dingding(text, msg):
|
||
# 将此处换为钉钉机器人的api
|
||
webhook = 'xxxxxxxx'
|
||
ding = cb.DingtalkChatbot(webhook)
|
||
ding.send_text(msg = '{}\r\n{}'.format(text, msg), is_at_all=False)
|
||
|
||
# server酱 http://sc.ftqq.com/?c=code
|
||
def server(text, msg):
|
||
# 将 xxxx 换成自己的server SCKEY
|
||
uri = 'https://sc.ftqq.com/xxxx.send?text={}&desp={}'.format(text, msg)
|
||
requests.get(uri, headers = github_headers, timeout= 10)
|
||
|
||
# 添加Telegram Bot推送支持
|
||
def tgbot(text,msg):
|
||
import telegram
|
||
# Your Telegram Bot Token
|
||
bot = telegram.Bot(token='123456:aaa-sdasdsa')
|
||
group_id='Your Group ID'
|
||
bot.send_message(chat_id=group_id,text='{}\r\n{}'.format(text,msg))
|
||
|
||
|
||
# 通过检查name 和 description 中是否存在test字样，排除test
|
||
def regular(req):
|
||
cve_name = req['items'][0]['name']
|
||
cve_description = req['items'][0]['description']
|
||
if cve_name.lower().find('test') == -1 and cve_description.lower().find('test') == -1:
|
||
return True
|
||
return False
|
||
|
||
|
||
# 根据cve 名字，获取描述，并翻译
|
||
def get_cve_des_zh(cve):
|
||
query_cve_url = "https://cve.mitre.org/cgi-bin/cvename.cgi?name=" + cve
|
||
response = requests.get(query_cve_url, headers = github_headers, timeout= 10)
|
||
html = etree.HTML(response.text)
|
||
des = html.xpath('//*[@id="GeneratedTable"]/table//tr[4]/td/text()')[0].strip()
|
||
return translate(des)
|
||
|
||
def sendNews(tools_list):
|
||
while True:
|
||
try:
|
||
print("cve 和 github 发布工具 监控中 ...")
|
||
# 抓取本年的cve
|
||
year = datetime.datetime.now().year
|
||
api = "https://api.github.com/search/repositories?q=CVE-{}&sort=updated".format(year)
|
||
# 请求API
|
||
req = requests.get(api, headers = github_headers, timeout= 10).json()
|
||
total_count = req['total_count']
|
||
|
||
# 通过 pushed_at 检查工具是否更新
|
||
time_list1 = get_pushed_at_time(tools_list)
|
||
|
||
# 监控时间间隔3分钟
|
||
time.sleep(180)
|
||
|
||
# 检查name 和 description 中是否存在test字样 和 是否更新
|
||
if regular(req) and total_count != getNews()[0]:
|
||
# 推送正文内容
|
||
# 推送标题
|
||
text = r'有新的CVE送达！'
|
||
# 获取 cve 名字 ，根据cve 名字，获取描述，并翻译
|
||
cve_zh = get_cve_des_zh(req['items'][0]['name'])
|
||
msg = "CVE编号："+ str(getNews()[1]) + "\r\n"+"Github地址："+ str(getNews()[2]) + "\r\n" + "CVE描述："+ cve_zh
|
||
|
||
# 三选一即可，没配置的 注释或者删掉
|
||
# server(text, msg)
|
||
dingding(text, msg)
|
||
# tgbot(text,msg)
|
||
print(msg)
|
||
|
||
time_list2 = get_pushed_at_time(tools_list)
|
||
|
||
for i in range(len(tools_list)):
|
||
# 两次时间不相等，则代表工具更新
|
||
if time_list1[i] != time_list2[i]:
|
||
update_log, download_url = get_update_log(tools_list[i])
|
||
tools_name = tools_list[i].split('/')[-1]
|
||
text = r'** ' + tools_name + r' ** 工具更新啦!'
|
||
# body = ''
|
||
if download_url != '':
|
||
body = "工具名称：" + tools_name + "\r\n" + "工具下载地址：" + download_url + "\r\n" + "工具更新日志：" + update_log
|
||
else:
|
||
body = "工具名称：" + "\r\n" + "工具更新日志：" + update_log
|
||
# 三选一即可，没配置的 注释或者删掉
|
||
# server(text, body)
|
||
dingding(text, body)
|
||
# tgbot(text,body)
|
||
print(body)
|
||
|
||
except Exception as e:
|
||
print("Program runing error:{}".format(traceback.print_exc()))
|
||
|
||
|
||
if __name__ == '__main__':
|
||
tools_list = [
|
||
"https://api.github.com/repos/BeichenDream/Godzilla",
|
||
"https://api.github.com/repos/rebeyond/Behinder",
|
||
"https://api.github.com/repos/AntSwordProject/antSword",
|
||
"https://api.github.com/repos/j1anFen/shiro_attack",
|
||
"https://api.github.com/repos/yhy0/ExpDemo-JavaFX",
|
||
"https://api.github.com/repos/yhy0/github-cve-monitor",
|
||
"https://api.github.com/repos/gentilkiwi/mimikatz",
|
||
"https://api.github.com/repos/ehang-io/nps",
|
||
"https://api.github.com/repos/chaitin/xray",
|
||
"https://api.github.com/repos/FunnyWolf/pystinger",
|
||
"https://api.github.com/repos/L-codes/Neo-reGeorg",
|
||
"https://api.github.com/repos/shadow1ng/fscan",
|
||
]
|
||
sendNews(tools_list) |