fixed the ID call for censys, will now also prompt for an ID instead of just the API key

Author: ekultek

autosploit.py

@@ -557,6 +557,63 @@ def try_shodan():
 
 if __name__ == "__main__":
 
+    '''from api_calls import (
+        shodan,
+        censys,
+        zoomeye
+    )
+    from lib.settings import (
+        load_api_keys,
+        API_URLS,
+        AUTOSPLOIT_PROMPT
+    )
+
+    from lib.output import (
+        prompt,
+        info,
+        warning
+    )
+
+    tokens = load_api_keys()
+
+    possible_apis = API_URLS.keys()
+
+    def get_query():
+        query = prompt("enter your search query")
+        return query
+
+    selected = False
+    info_msg = "searching {} API with query '{}'"
+    info("pick a search engine")
+    for i, api in enumerate(sorted(possible_apis), start=1):
+        print("{}. {}".format(i, api))
+
+    while not selected:
+        choice = raw_input(AUTOSPLOIT_PROMPT)
+        try:
+            choice = int(choice)
+            if choice == 1:
+                selected = True
+                query = get_query()
+                info(info_msg.format("Shodan", query))
+                censys.CensysAPIHook(tokens["censys"][1], tokens["censys"][0], query).censys()
+            elif choice == 2:
+                selected = True
+                query = get_query()
+                info(info_msg.format("Censys", query))
+                shodan.ShodanAPIHook(tokens["shodan"][0], query).shodan()
+            elif choice == 3:
+                query = get_query()
+                selected = True
+                info("ZoomEye token will be loaded automatically")
+                info(info_msg.format("Zoomeye", query))
+                zoomeye.ZoomEyeAPIHook(query).zoomeye()
+            else:
+                warning("choice must be between 1-{}".format(len(API_URLS.keys())))
+        except:
+            warning("choice must be integer not string")'''
+
+
     logo()
 
     if len(sys.argv) > 1:

lib/settings.py

@@ -5,6 +5,7 @@
 import psutil
 
 import lib.output
+import api_calls
 
 
 HOST_FILE = "{}/hosts.txt".format(os.getcwd())
@@ -13,8 +14,8 @@
 PLATFORM_PROMPT = "\n{}@\033[36mPLATFORM\033[0m$ ".format(getpass.getuser())
 AUTOSPLOIT_PROMPT = "\n\033[31m{}\033[0m@\033[36mautosploit\033[0m# ".format(getpass.getuser())
 API_KEYS = {
-    "censys": "{}/etc/tokens/censys.key".format(os.getcwd()),
-    "shodan": "{}/etc/tokens/shodan.key".format(os.getcwd())
+    "censys": ("{}/etc/tokens/censys.key".format(os.getcwd()), "{}/etc/tokens/censys.id".format(os.getcwd())),
+    "shodan": ("{}/etc/tokens/shodan.key".format(os.getcwd()), )
 }
 API_URLS = {
     "shodan": "https://api.shodan.io/shodan/host/search?key={token}&query={query}",
@@ -94,14 +95,18 @@ def makedir(dir):
 
     makedir(path)
     for key in API_KEYS.keys():
-        if not os.path.isfile(API_KEYS[key]):
+        if not os.path.isfile(API_KEYS[key][0]):
             access_token = lib.output.prompt("enter your {} API token".format(key.title()), lowercase=False)
-            with open(API_KEYS[key], "a+") as log:
+            if key.lower() == "censys":
+                identity = lib.output.prompt("enter your {} ID".format(key.title()), lowercase=False)
+                with open(API_KEYS[key][1], "a+") as log:
+                    log.write(identity)
+            with open(API_KEYS[key][0], "a+") as log:
                 log.write(access_token.strip())
         else:
-            lib.output.info("{} API token loaded from {}".format(key.title(), API_KEYS[key]))
+            lib.output.info("{} API token loaded from {}".format(key.title(), API_KEYS[key][0]))
     api_tokens = {
-        "censys": open(API_KEYS["censys"]).read(),
-        "shodan": open(API_KEYS["shodan"]).read()
+        "censys": (open(API_KEYS["censys"][0]).read(), open(API_KEYS["censys"][1]).read()),
+        "shodan": (open(API_KEYS["shodan"][0]).read(), )
     }
-    return api_tokens
+    return api_tokens