Git Product home page Git Product logo

pubilcassetinfo's Introduction

PubilcAssetInfo 0.1

这个脚本的主要目标是以甲方安全人员的视角,尽可能收集发现企业的域名和服务器公网IP资产。如百度云、阿里云、腾讯云等。

Author

咚咚呛

如有其他建议,可联系微信280495355

Support

支持获取如下域名服务

1、nginx(openresty、tengine)配置文件解析
2、腾讯云 DNSPod域名解析
3、阿里云 万网域名解析
4、百度云 BCD域名解析

支持公网IP获取服务

1、阿里云:支持ECS云主机服务;支持SLB负载均衡服务;支持弹性公网IP服务
2、百度云:支持弹性公网IP服务;(百度大部分服务都是基于弹性公网来对外提供IP)
3、腾讯云:支持弹性公网IP服务、CVM云服务器

Dependencies

sudo pip install -r requirements

Tree

PubilcAssetInfo
----conf   #配置目录
----lib    #模块库文件
----log    #日志目录
----out    #输出目录
----PubilcAssetInfo.py   #主程序

Config

配置目录:./conf/info.conf

#以下相关配置信息不填写则不进行检测

[Nginx]
# Nginx 配置文件如 /opt/nginx/conf/nginx.conf
Nginx_file = 
# Nginx 配置目录如 /opt/nginx/conf
Nginx_dir = 

[AliYun]
# AccessKey需开通AliyunDNSReadOnlyAccess、AliyunSLBReadOnlyAccess、AliyunEIPReadOnlyAccess、AliyunDNSReadOnlyAccess权限
AliYun_AccessKeyId = 
AliYun_AccessKeySecret = 

[DNSPod]
# DNSPOD的用户login_token
DNSPod_Login_Token = 

[BaiDuYun]
# 需开工单对客服申请域名服务API权限
BaiDuYun_AccessKey = 
BaiDuYun_AccessKeySecret = 
# 由于百度API/SDK 接口并不支持根域名列表获取,故只能事先填入根域名列表,如
Baidu_ROOT_Domain_List = graygdd.top,grayddq.top

[Tencent]
Tencent_SecretId = 
Tencent_SecretKey = 

[OPTIONS]
#输出文件,默认不填写为当前目录
output = 
#过滤域名,默认不填写则不过滤
filter_domain = 
#不填则为域名和公网IP,可选 domain/ip
type = 
#日志路径,默认本目录/log/process.log
log = 
#各环节结果详情 True/False
details_info = 

Log

日志目录默认:./conf/info.conf

Screenshot

Screenshot

DNSPod

DNSPod_Login_Token 是由 ID,Token 组合而成的,用英文的逗号分割

参考:https://support.dnspod.cn/Kb/showarticle/tsid/227/

Aliyun

AccessKeyId参考:https://help.aliyun.com/document_detail/60884.html

建议开通AliyunDNSReadOnlyAccess、AliyunSLBReadOnlyAccess、AliyunEIPReadOnlyAccess、AliyunDNSReadOnlyAccess权限

Baiduyun

AccessKey参考:https://cloud.baidu.com/doc/Reference/GetAKSK.html

需开工单对客服申请域名服务API权限,由于百度API/SDK 接口并不支持跟域名列表获取,故只能事先填入根域名列表

Tencent

AccessKey生成:云产品->管理工具->云API密钥

pubilcassetinfo's People

Contributors

grayddq avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.