#!/usr/bin/env python

# -*- coding: utf-8 -*-

# @Time    : 2019/10/21 9:47

# @Author  : xiaodong

# @Site    : #获取经过burp的目标的url，用于后续的awvs、bbscan的扫描

# @File    : get-link.py

# @Software: PyCharm

from burp import IBurpExtender

from burp import IHttpListener

from burp import IHttpRequestResponse

from burp import IResponseInfo

from burp import IRequestInfo

from burp import IHttpService

from burp import IScannerCheck

from burp import IScannerInsertionPointProvider

from burp import IParameter

from burp import IScanIssue

import string

from  array import array

import re

class BurpExtender(IBurpExtender,IScannerCheck):

    def registerExtenderCallbacks(self,callbacks):

        self._callbacks = callbacks

        self._helpers = callbacks.getHelpers()

        self._callbacks.registerScannerCheck(self) #注册扫描插件

        self._callbacks.setExtensionName("get link")#定义插件的名称

        print("whats wrong")

    #以上都是标准化程序

    def doPassiveScan(self, baseRequestResponse):

        Request = baseRequestResponse.getRequest()

        analyzedRequest, reqHeaders, reqBodys, reqMethod, reqParameters= self.get_request_info(Request )

        httpService = baseRequestResponse.getHttpService()

        host, port, protocol, ishttps, = self.get_server_info(httpService)

        targetHost = ['saicmaxus', 'saicmotor', 'maxuscloud']

        if (host.split('.')[-3] in  targetHost) or (host.split('.')[-2] in targetHost):#多级或单级或类似baidu.net.cn的形势取主域名字段，比对是否在目标列表中

            url = self.get_request_url(protocol,reqHeaders)

            print(url)

    def consolidateDuplicateIssues(self, existingIssue, newIssue):

        return 0

    def doActiveScan(self, baseRequestResponse, insertionPoint):

            # report the issue

            return None

    # 获取响应的一些信息：响应头，响应内容，响应状态码

    def get_response_info(self, response):

        analyzedResponse = self._helpers.analyzeResponse(

            response)  # analyzeResponse方法可用于分析HTTP响应，并获取有关它的各种关键详细信息。返回：IResponseInfo可以查询的对象以获取有关响应的详细信息。

        resHeaders = analyzedResponse.getHeaders()  # getHeaders方法用于获取响应中包含的HTTP标头。返回：响应中包含的HTTP标头。

        resBodys = response[

                   analyzedResponse.getBodyOffset():].tostring()  # getBodyOffset方法用于获取消息正文开始的响应中的偏移量。返回：消息正文开始的响应中的偏移量。response[analyzedResponse.getBodyOffset():]获取正文内容

        resStatusCode = analyzedResponse.getStatusCode()  # getStatusCode获取响应中包含的HTTP状态代码。返回：响应中包含的HTTP状态代码。

        for header in resHeaders:

            if 'Content-Length' in header:

                resLength = int(header.split(':')[1].strip())  # 我在这里增加了一个返回包长度检测

        return resHeaders, resBodys, resStatusCode, resLength

        # 获取服务端的信息，主机地址，端口，协议

    def get_server_info(self, httpService):

        host = httpService.getHost()

        port = httpService.getPort()

        protocol = httpService.getProtocol()

        ishttps = False

        if protocol == 'https':

            ishttps = True

        return host, port, protocol, ishttps

        # 获取请求的参数名、参数值、参数类型（get、post、cookie->用来构造参数时使用）

    def get_parameter_Name_Value_Type(self, parameter):

        parameterName = parameter.getName()

        parameterValue = parameter.getValue()

        parameterType = parameter.getType()

        return parameterName, parameterValue, parameterType

        # 获取请求的url

    def get_request_url(self, protocol, reqHeaders):

        link = reqHeaders[0].split(' ')[1]

        host = reqHeaders[1].split(' ')[1]

        return protocol + '://' + host + link

    # 保存结果

    def save(self, content):

        print(content)

        f = open('get_link.txt', 'at')

        f.writelines(content + '\n\n')

        f.close()

    def get_request_info(self, request):

        analyzedRequest = self._helpers.analyzeRequest(

            request)  # analyzeRequest用于分析HTTP请求，并获取有关它的各种关键详细信息。生成的IRequestInfo对象

        reqHeaders = analyzedRequest.getHeaders()  # 用于获取请求中包含的HTTP头。返回：请求中包含的HTTP标头。

        reqBodys = request[analyzedRequest.getBodyOffset():].tostring()  # 获取消息正文开始的请求中的偏移量。返回：消息正文开始的请求中的偏移量。

        reqMethod = analyzedRequest.getMethod()  # 获取请求方法

        reqParameters = analyzedRequest.getParameters()

        return analyzedRequest, reqHeaders, reqBodys, reqMethod, reqParameters