order.py

'''
 *@author: wr
 *@GitHub:https://github.com/wr0x00/Lsploit
 *@date: 2022.9.9
 *@description: 命令处理
'''

import requests as rq
from libs import strings
import libs.sniff
#设置语言
'''
if  not __name__ == '__main__':
	try:
		import json
		# 读入示例json数据
		j=open("libs/configs.json",encoding='utf-8')
		demo_json = json.loads(j.read())

		if demo_json["language"]=='cn'or demo_json["language"]=='CN': #中文
			from libs.strings import String_CN as Str
		
		if demo_json["language"]=='en'or demo_json["language"]=='EN': #英文
			from libs.strings import String_EN as Str

	except Exception as e:
		from libs.strings import String_EN as Str
		print("langrage_ERROR:"+format(e))
           ''' 
from libs.config.config import Config
if  not __name__ == '__main__':
    if Config().language=='cn' or Config().language=='CN':
        from libs.strings import String_CN as Str #中文
    if Config().language=='en' or Config().language=='EN':
        from libs.strings import String_EN as Str #英文

def cve_info():   
    '''显示最新漏洞播报'''

    from bs4 import BeautifulSoup as b
    from prettytable import PrettyTable
    import json
    from libs.config.config import Config

    x = PrettyTable(["最新漏洞", "时间", "详情"])#绘制表格
    #x.align["最新漏洞"] = "1" 
    #x._max_width = {"最新漏洞" : 25}
    #x.padding_width = 1  # 填充宽度
    try:
        url=Config().threat_web
        header = {'User-Agent': 'Mozilla/5.0 (Mac NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36'}
        r=rq.get(url,headers=header,timeout=2)
    except rq.exceptions.ReadTimeout:
        print(Str.ERROR_CONNECT)
    soup=b(r.text,'html.parser')
    items=soup.find_all('tr')

    #j=open("libs/configs.json",encoding='utf-8')
    #demo_json = json.loads(j.read())
    from libs.config.config import Config

    max=int(Config().news)+1

    for i in items[1:max]:
        tds=i.find_all('td')
        cve_info=tds[3].text
        time=tds[2].text
        for MORE_url in i.find_all('a'):x.add_row(["\033[33m"+cve_info+"\033[1;37;40m","\033[32m"+time+"\033[1;37;40m","\033[94m"+MORE_url.get('href')+"\033[1;37;40m"])

    print(x)
    print(f"\t\t\t\t----数据来源:{url}")
    print("(使用setnows设置播报漏洞条数,例如“setnows 2”)\t\t\tCURL+c 退出")
    return x+f"\n\t\t\t\t----数据来源:{url}\n"+"(使用setnows设置播报漏洞条数,例如“setnows 2”)\t\t\tCURL+c 退出"

def order_deal_Setting(order:str):
    import json

    s=order.split()

    with open("libs/configs.json", "r",encoding='utf-8') as jsonFile:
        demo_json = json.load(jsonFile)
    try:
        if s[0]=='setnews':     #设置播报显示多少数
            #demo_json["news"]=s[1]
            from libs.config.config import Config
            Config.change_config_file(Config().fothers,"others","news",s[1])
            print(Str.SUCCESS_SET)
    
        if s[0]=='setproxy':     #设置代理
            #demo_json["proxy"]=s[1]
            from libs.config.config import Config
            Config.change_config_file(Config().fothers,"others","proxy",s[1])
            print(Str.SUCCESS_SET)
        
        if s[0]=='setlang':       #设置语言
            #demo_json["language"] =s[1]
            from libs.config.config import Config
            Config.change_config_file(Config().fothers,"others","language",s[1])
            print(Str.SUCCESS_SET)

        if s[0]=='setcozeid':       #设置扣子api
            #demo_json["coze_taken"] =s[1]
            from libs.config.config import Config
            Config.change_config_file(Config().fkeys,"keys","coze_taken",s[1])
            print(Str.SUCCESS_SET)
    
        if s[0]=='setbotid':       #设置扣子智能体id
            #demo_json["bot_id"] =s[1]
            from libs.config.config import Config
            Config.change_config_file(Config().fkeys,"keys","bot_id",s[1])
            print(Str.SUCCESS_SET)
    except Exception:
        print(Str.ERROR_ORDER)
        
    with open("libs/configs.json", "w") as jsonFile:
        json.dump(demo_json, jsonFile,ensure_ascii=False)
    
    
    jsonFile.close()

def order_deal_Common(order:str,agent=None):
    import libs
    s=order.split()
    try:
        print(s[0]) 
    except IndexError:  
        print(Str.ERROR_ORDER)
        return None
    
    if s[0]=='help':    print(Str.HELP)

    elif s[0]=='mine': #查看本机公网地址
        import requests
        print('\033[91m'+requests.get('http://myip.ipip.net',timeout=5).text+'\033[1;37;40m')
              
    elif s[0]=='ai':  #广域地址
        import libs.ai
        libs.ai.coze_ai_cli()
    
    elif s[0]=='i':
        import requests
        import socket
        import libs.extract
        import libs.tools
        print(f'{libs.tools.which_os()}')#系统种类
        print(f"{Str.LOCALNAME}{socket.gethostname()}")  #本机名
        print(f"{Str.LOCALHOST_LAN}{socket.gethostbyname(socket.gethostname())}")    #局域地址
        try:
            info=requests.get('http://myip.ipip.net', timeout=5).text
            print(Str.LOCALHOST_WAN+info)    #广域地址
            #ip_position(re.findall("\d+",info))
        except requests.exceptions.ConnectionError:pass
              
        if libs.tools.which_os() == 'win32' or libs.tools.which_os() == 'win64':
            libs.extract.extract_win()

        if libs.tools.which_os() == 'linux' or libs.tools.which_os() == 'darwin':
            try:libs.extract.extract_linux(s[1])
            except IndexError:print(libs.extract.show())
        else:
            print(Str.ERROR_OS)

    elif s[0]=='news':
        try:cve_info()    
        except requests.exceptions.SSLError: print("无漏洞播报，漏洞站貌似是崩了。。。")
        except requests.exceptions.ConnectionError:pass
    elif s[0]=='upgrade':
            import os
            print(Str.UPGRADE)
            os.system('git pull')
    elif s[0]=='show':  #列出
           try:
                import libs.tools
                if s[1]== "exp" or s[1]== "exps": print(libs.tools.search.expand_exp()[-1])
                if s[1]== "poc" or s[1]== "pocs": print(libs.tools.search.expand_poc()[-1])
           except IndexError:               print(Str.ERROR_ORDER)

    elif s[0]=='survey':    #（调查）查看选项的详细信息
        try:
            import libs.tools
            libs.tools.search.detail(int(s[1]))
        except IndexError:                  print(Str.ERROR_ORDER)

    elif s[0]=='chose':     #选择序号
        try:
            import libs.tools
            from libs.config.config import Config
            libs.tools.search.detail(int(s[1]))
        except IndexError:                  print(Str.ERROR_ORDER)

    elif s[0]=='sw':          #扫描网址目录（线程默认60)
        import httpx       
        try:
            if s[2] and not s[3]:           libs.sniff.httpx_dirscan(format(s[1]), "libs/dict.txt", int(s[2]))
            if s[3] and s[2]:               libs.sniff.httpx_dirscan(format(s[1]), s[3], int(s[2]))
        except IndexError:
            try:                            libs.sniff.httpx_dirscan(format(s[1]), "libs/dict.txt",60)
            except httpx.ConnectTimeout:    print(Str.ERROR_CONNECT)
        except httpx.ConnectTimeout:        print(Str.ERROR_CONNECT)
        finally:                            print(Str.ERROR_ORDER)

    elif s[0]=='sp': 
        try:
            import os,libs.sniff         #扫描端口

            if "/" in s[1]:         #批量扫描
                print(Str.LOADING)
                target          =s[1].split(".")
                max             =target[3].split('/')
                online          =[]

                for i in range(int(max[0]),int(max[1])+1):
                    cmd=os.popen('ping  %s' % (target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))).read()
                    if "ttl" in cmd or "TTL" in cmd:
                                    #print(os.popen('ping  %s' % (target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))).read())
                                    online.append(i)
                                    continue
                    else:           continue

                for i in online:
                                    print(Str.ONLINE+target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))

                for i in online:
                                    print("\033[94m[+]"+target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i)+"\033[1;37;40m")
                                    libs.sniff.ScanPort(target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i),int(s[2]))

            else:                   libs.sniff.ScanPort(format(s[1]),int(s[2]))  

        except IndexError:
            print(Str.LOADING)       
            import os,libs.sniff #扫描端口 
            if "/" in s[1]:      #批量扫描
                target          =s[1].split(".")
                max             =target[3].split('/')
                online          =[]
                
                for i in range(int(max[0]),int(max[1])+1):
                    if "ms" in os.popen('ping  %s' % (target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))).read():
                                    #print(os.popen('ping  %s' % (target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))).read())
                                    online.append(i)
                                    continue
                    else:           continue
                for i in online:
                                    print(Str.ONLINE+target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))
                for i in online:
                                    print("\033[94m[+]"+target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i)+"\033[1;37;40m")
                                    libs.sniff.ScanPort(target[0]+'.'+target[1]+'.'+target[2]+'.'+str(i))

            else:                   libs.sniff.asyncio_ScanPort(format(s[1]))   

    elif s[0]=='sd':
        import libs.subdomain
        try:
            if s[2]:libs.subdomain.subdomain(format(s[1]),s[2])  
        except IndexError:
            libs.subdomain.subdomain(format(s[1]),"libs/subdomain.txt")          #扫描子域名(字典默认modules\subdomain.txt)
    
    elif s[0]=='whois':       #whois查询 
        libs.sniff.whois_sniff(format(s[1]))

    elif s[0]=='shod':         #shodan
        libs.sniff.shodan_search(format(s[1]))
    
    elif s[0]=='fqfa':         #fqfa
        try:
            if s[2]:libs.sniff.fqfa_search(format(s[1]),s[2])
        except IndexError:
            libs.sniff.fqfa_search(format(s[1]))  

    elif s[0]=='c':
        import libs.cms as cms
        cms.set_agent(agent)
        cms.cms(format(s[1]))

    elif s[0]=='poc':
        import os  
        try:                    os.system("python libs/ws.py -po " + format(s[2]) + " -t " +s[1])
        except IndexError:      os.system("python libs/ws.py" + " -t " + s[1])
    
    elif s[0]=='ssh': 
        import libs.ssh as r
        if s[4]:                r.force_ssh(s[1], s[4], s[2], int(s[3]))
        else:                   r.force_ssh(s[1], 'libs/pwddic/password/_top19576.txt', s[2], int(s[3]))
    
    elif s[0]=='webshell': 
        import libs.webshell as w
        w.set_agent(agent)
        w.exp(s[1], s[2])  

    elif s[0]=='dos': 
        import libs.dosattack as y
        try:                    y.exp(s[1], s[2], int(s[3]))
        except IndexError:      y.exp(s[1], s[2],40)

    elif s[0]=='exp': 
        try:
            exp = s[1].replace("-", "_")
            exp = exp.replace("cve", "C")
            exec("import libs.exp." + exp + "_EXP as t\n")
            exec(f"t.set_agent(agent)\n")

            if s[2]:        exec(f"t.exp('{s[2]}',{s[3]})")
        except IndexError:  print(Str.ERROR_ORDER)
    else:                   print(Str.ERROR_ORDER)