From e5d23738c1fc33488d569811dffb77049e9a6a08 Mon Sep 17 00:00:00 2001 From: g147 <26509147+g147@users.noreply.github.com> Date: Tue, 19 Mar 2024 07:34:09 +0530 Subject: [PATCH] puncia[0.15] --- README.md | 55 ++++++++++++------ puncia-actions.yml | 37 ++++++++++++ puncia/__main__.py | 141 +++++++++++++++++++++++++++++++++------------ setup.py | 4 +- 4 files changed, 180 insertions(+), 57 deletions(-) create mode 100644 puncia-actions.yml diff --git a/README.md b/README.md index f7cd5a6..f505065 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,5 @@ # The Panthera(P.)uncia of Cybersecurity -### Subdomain & Exploit Hunter powered by AI +### Official CLI utility for Subdomain Center & Exploit Observer [![Downloads](https://pepy.tech/badge/puncia)](https://pepy.tech/project/puncia) @@ -7,7 +7,10 @@

-Puncia utilizes two of our intelligent APIs - [Subdomain Center](https://subdomain.center) & [Exploit Observer](https://exploit.observer), to gather the results. +Puncia utilizes two of our intelligent APIs to gather the results -
+- [Subdomain Center - The World's Fastest Growing Subdomain & Shadow IT Intelligence Database](https://subdomain.center)
+- [Exploit Observer - The World's Largest Exploit & Vulnerability Intelligence Database](https://exploit.observer) + **Please note that although these results can sometimes be pretty inaccurate & unreliable, they can greatly differ from time to time due to their self-improvement capabilities.** ## Installation @@ -15,8 +18,22 @@ Puncia utilizes two of our intelligent APIs - [Subdomain Center](https://subdoma 2. From Source - `pip3 install .`
## Usage -1. Subdomain - `puncia subdomain ` -2. Exploit - `puncia exploit `
+1. Subdomain - `puncia subdomain ` +2. Exploit - `puncia exploit ` +3. Bulk - `puncia exploit `
+### Bulk Input JSON Format +``` +{ + "subdomain": [ + "domainA.com", + "domainB.com" + ], + "exploit": [ + "eoidentifierA", + "eoidentifierA" + ] +} +``` ## Supported EOIdentifiers 1. Common Vulnerabilities and Exposures (CVE) - [`puncia exploit CVE-2021-3450`](https://api.exploit.observer/?keyword=CVE-2021-3450) @@ -27,18 +44,19 @@ Puncia utilizes two of our intelligent APIs - [Subdomain Center](https://subdoma 6. GitHub Security Advisories (GHSA) - [`puncia exploit GHSA-wfh5-x68w-hvw2`](https://api.exploit.observer/?keyword=GHSA-wfh5-x68w-hvw2) 7. CSA Global Security Database (GSD) - [`puncia exploit GSD-2021-3450`](https://api.exploit.observer/?keyword=GSD-2021-3450) 8. OffSec Exploit Database (EDB) - [`puncia exploit EDB-10102`](https://api.exploit.observer/?keyword=EDB-10102) -9. Trend Micro Zero Day Initiative (ZDI) - [`puncia exploit ZDI-23-1714`](https://api.exploit.observer/?keyword=ZDI-23-1714) -10. Packet Storm Security (PSS) - [`puncia exploit PSS-170615`](https://api.exploit.observer/?keyword=PSS-170615) -11. CXSecurity World Laboratory of Bugtraq (WLB) - [`puncia exploit WLB-2024010058`](https://api.exploit.observer/?keyword=WLB-2024010058) -12. Rapid7 Metasploit Framework (MSF) - [`puncia exploit MSF/auxiliary_admin/2wire/xslt_password_reset`](https://api.exploit.observer/?keyword=MSF/auxiliary_admin/2wire/xslt_password_reset) -13. ProjectDiscovery Nuclei (PD) - [`puncia exploit PD/http/cves/2020/CVE-2020-12720`](https://api.exploit.observer/?keyword=PD/http/cves/2020/CVE-2020-12720) -14. Hackerone Hacktivity (H1) - [`puncia exploit H1-2230915`](https://api.exploit.observer/?keyword=H1-2230915) -15. Cisco Talos (TALOS) - [`puncia exploit TALOS-2023-1896`](https://api.exploit.observer/?keyword=TALOS-2023-1896) -16. ProtectAI Huntr (HUNTR) - [`puncia exploit HUNTR-001d1c29-805a-4035-93bb-71a0e81da3e5`](https://api.exploit.observer/?keyword=HUNTR-001d1c29-805a-4035-93bb-71a0e81da3e5) -17. WP Engine WPScan (WPSCAN) - [`puncia exploit WPSCAN-52568abd-c509-411e-8391-c75e7613eb42`](https://api.exploit.observer/?keyword=WPSCAN-52568abd-c509-411e-8391-c75e7613eb42) -18. Defiant Wordfence (WORDFENCE) - [`puncia exploit WORDFENCE-00086b84-c1ec-447a-a536-1c73eac1cc85`](https://api.exploit.observer/?keyword=WORDFENCE-00086b84-c1ec-447a-a536-1c73eac1cc85) -19. YouTube (YT) - [`puncia exploit YT/ccqjhUmwLCk`](https://api.exploit.observer/?keyword=YT/ccqjhUmwLCk) -20. Technologies/Keywords (No Prefix) - [`puncia exploit grafana`](https://api.exploit.observer/?keyword=grafana)
+9. Knownsec Seebug (SSVID) - [`puncia exploit SSVID-99817`](https://api.exploit.observer/?keyword=SSVID-99817) +10. Trend Micro Zero Day Initiative (ZDI) - [`puncia exploit ZDI-23-1714`](https://api.exploit.observer/?keyword=ZDI-23-1714) +11. Packet Storm Security (PSS) - [`puncia exploit PSS-170615`](https://api.exploit.observer/?keyword=PSS-170615) +12. CXSecurity World Laboratory of Bugtraq (WLB) - [`puncia exploit WLB-2024010058`](https://api.exploit.observer/?keyword=WLB-2024010058) +13. Rapid7 Metasploit Framework (MSF) - [`puncia exploit MSF/auxiliary_admin/2wire/xslt_password_reset`](https://api.exploit.observer/?keyword=MSF/auxiliary_admin/2wire/xslt_password_reset) +14. ProjectDiscovery Nuclei (PD) - [`puncia exploit PD/http/cves/2020/CVE-2020-12720`](https://api.exploit.observer/?keyword=PD/http/cves/2020/CVE-2020-12720) +15. Hackerone Hacktivity (H1) - [`puncia exploit H1-2230915`](https://api.exploit.observer/?keyword=H1-2230915) +16. Cisco Talos (TALOS) - [`puncia exploit TALOS-2023-1896`](https://api.exploit.observer/?keyword=TALOS-2023-1896) +17. ProtectAI Huntr (HUNTR) - [`puncia exploit HUNTR-001d1c29-805a-4035-93bb-71a0e81da3e5`](https://api.exploit.observer/?keyword=HUNTR-001d1c29-805a-4035-93bb-71a0e81da3e5) +18. WP Engine WPScan (WPSCAN) - [`puncia exploit WPSCAN-52568abd-c509-411e-8391-c75e7613eb42`](https://api.exploit.observer/?keyword=WPSCAN-52568abd-c509-411e-8391-c75e7613eb42) +19. Defiant Wordfence (WORDFENCE) - [`puncia exploit WORDFENCE-00086b84-c1ec-447a-a536-1c73eac1cc85`](https://api.exploit.observer/?keyword=WORDFENCE-00086b84-c1ec-447a-a536-1c73eac1cc85) +20. YouTube (YT) - [`puncia exploit YT/ccqjhUmwLCk`](https://api.exploit.observer/?keyword=YT/ccqjhUmwLCk) +21. Technologies/Keywords (No Prefix) - [`puncia exploit grafana`](https://api.exploit.observer/?keyword=grafana)
## Noteworthy Mentions @@ -48,6 +66,5 @@ Puncia utilizes two of our intelligent APIs - [Subdomain Center](https://subdoma ## More from [A.R.P. Syndicate](https://www.arpsyndicate.io) - [Attack Surface Management](https://asm.arpsyndicate.io) -- [OSINT Resources](https://asm.arpsyndicate.io/intelligence.html) -- [Subdomain Center](https://subdomain.center) -- [Exploit Observer](https://exploit.observer) +- [Open Source Intelligence](https://asm.arpsyndicate.io/intelligence.html) +- [Free Vulnerability Assessment Report](https://asm.arpsyndicate.io/free-vulnerability-scanning.html) \ No newline at end of file diff --git a/puncia-actions.yml b/puncia-actions.yml new file mode 100644 index 0000000..0331a6c --- /dev/null +++ b/puncia-actions.yml @@ -0,0 +1,37 @@ +name: puncia-actions + +on: + schedule: + - cron: '0 0 * * *' + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + puncia: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Set up Python + uses: actions/setup-python@v2 + with: + python-version: '3.9' + + - name: Install Puncia + run: | + pip3 install puncia + + - name: Run Puncia + run: | + puncia bulk ${{ github.workspace }}/inputs.json ${{ github.workspace }}/ + + - name: Commit and push changes + run: | + git config --local user.email "puncia@github.local" + git config --local user.name "Puncia Actions" + git add . + git commit -m "$(date)" + git push \ No newline at end of file diff --git a/puncia/__main__.py b/puncia/__main__.py index 7a9a550..9fea84f 100755 --- a/puncia/__main__.py +++ b/puncia/__main__.py @@ -1,49 +1,118 @@ +import os import requests import sys import json import time +import re + +API_URLS = { + "subdomain": "http://api.subdomain.center/?domain=", + "exploit": "http://api.exploit.observer/?keyword=", +} + + +def query_api(mode, query, output_file=None): + time.sleep(3) + url = API_URLS.get(mode) + if not url: + sys.exit("Invalid Mode") + + response = requests.get(url + query).json() + if not response: + print("Null response from the API") + return + result = json.dumps(response, indent=4, sort_keys=True) + print(result) + + if output_file: + existing_data = {} + if os.path.isfile(output_file): + with open(output_file, "r") as f: + existing_data = json.load(f) + + if mode == "subdomain": + if len(existing_data) == 0: + existing_data = [] + existing_data.extend(response) + existing_data = list(set(existing_data)) + elif mode == "exploit": + if "entries" in existing_data and len(existing_data["entries"]) > 0: + for lang in existing_data["entries"]: + response_entries = response.get("entries", {}).get(lang, []) + existing_data_entries = existing_data["entries"].get(lang, []) + existing_data["entries"][lang] = list( + set(existing_data_entries + response_entries) + ) + existing_data["entries"][lang].sort() + else: + existing_data = response + total_entries = 0 + for lang in existing_data["entries"]: + total_entries = len(existing_data["entries"][lang]) + total_entries + if len(existing_data["description"]) > 0: + if "description" in response and len(response["description"]) > 0: + existing_data["description"] = response["description"] + existing_data["description"] = re.sub( + r"\b(\d+)\s+(?:entries in)\b", + str(total_entries) + " entries in", + existing_data["description"], + ) + existing_data["description"] = re.sub( + r"\b(\d+)\s+(?:file formats)\b", + str(len(existing_data["entries"])) + " file formats", + existing_data["description"], + ) + with open(output_file, "w") as f: + json.dump(existing_data, f, indent=4, sort_keys=True) def main(): try: - print( - "Panthera(P.)uncia [v0.14]\nSubdomain & Exploit Hunter powered by AI\n[https://www.arpsyndicate.io]\n---------" - ) - if len(sys.argv) < 2: - sys.exit("additional command required (subdomain/exploit)") + print("---------") + print("Panthera(P.)uncia [v0.15]") + print("A.R.P. Syndicate [https://arpsyndicate.io]") + print("Subdomain Center [https://subdomain.center]") + print("Exploit Observer [https://exploit.observer]") + print("---------") + if len(sys.argv) < 3: - sys.exit("additional input required") - if len(sys.argv) > 4: - sys.exit("refer usage at - https://github.com/ARPSyndicate/puncia#usage") - time.sleep(2) - if sys.argv[1] == "subdomain": - response = requests.get( - "http://api.subdomain.center/?domain=" + sys.argv[2] - ).json() - if len(response) > 0: - result = json.dumps(response, indent=4, sort_keys=True) - else: - sys.exit("Null Response") - print(result) - if len(sys.argv) == 4: - with open(sys.argv[3], "w") as f: - f.write(result) - elif sys.argv[1] == "exploit": - response = requests.get( - "http://api.exploit.observer/?keyword=" + sys.argv[2] - ).json() - if "entries" in response: - result = json.dumps(response, indent=4, sort_keys=True) - else: - sys.exit("Null Response") - print(result) - if len(sys.argv) == 4: - with open(sys.argv[3], "w") as f: - f.write(result) + sys.exit( + "usage: puncia [output_file/output_directory]\nrefer: https://github.com/ARPSyndicate/puncia#usage" + ) + + mode = sys.argv[1] + query = sys.argv[2] + output_file = sys.argv[3] if len(sys.argv) == 4 else None + + if mode not in API_URLS and mode != "bulk": + sys.exit("Invalid Mode") + + if mode == "bulk": + if not os.path.isfile(query): + sys.exit("jsonfile as query input required for bulk mode") + if output_file: + os.makedirs(output_file + "/subdomain/", exist_ok=True) + os.makedirs(output_file + "/exploit/", exist_ok=True) + with open(query, "r") as f: + input_file = json.load(f) + if "subdomain" in input_file: + for bulk_query in input_file["subdomain"]: + query_api( + "subdomain", + bulk_query, + output_file + "/subdomain/" + bulk_query + ".json", + ) + if "exploit" in input_file: + for bulk_query in input_file["exploit"]: + query_api( + "exploit", + bulk_query, + output_file + "/exploit/" + bulk_query + ".json", + ) else: - sys.exit("refer usage at - https://github.com/ARPSyndicate/puncia#usage") - except Exception as exception: - sys.exit(exception.__class__.__name__ + ": " + str(exception)) + query_api(mode, query, output_file) + except Exception as e: + sys.exit(f"Error: {str(e)}") if __name__ == "__main__": diff --git a/setup.py b/setup.py index 8b5c851..86404a0 100644 --- a/setup.py +++ b/setup.py @@ -2,7 +2,7 @@ setup( name="puncia", - version="0.14", + version="0.15", author="A.R.P. Syndicate", author_email="ayush@arpsyndicate.io", keywords="subdomains subdomain exploits exploit arpsyndicate panthera uncia puncia snow leopard", @@ -14,7 +14,7 @@ }, long_description=open("README.md").read(), long_description_content_type="text/markdown", - description="The Panthera(P.)uncia of Cybersecurity - Subdomain & Exploit Hunter powered by AI", + description="The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer", packages=find_packages(), install_requires=[ "requests",