daemon_interpreter.py

#!/usr/bin/python

import os
import sys
import time
import subprocess
from colored import fg, bg, attr


#
# print banner
#
def banner():
	print("""
                _
             __| |  _ __    ___   _ __    _   _       _ __    _   _
            / _` | | '_ \  / __| | '_ \  | | | |     | '_ \  | | | |
           | (_| | | | | | \__ \ | |_) | | |_| |  _  | |_) | | |_| |
            \__,_| |_| |_| |___/ | .__/   \__, | (_) | .__/   \__, |
                                 |_|      |___/      |_|      |___/

                    by @gwendallecoguic

""")
	pass


#
# usage
#
def usage( error="" ):
    sys.stdout.write( "Usage: %s\n" % sys.argv[0] )
    if len(error):
		sys.stdout.write( "Error: %s\n" % error )
    sys.exit(-1)


#
# remove the n first lines of the input file
#
def truncateFile( file, n_lines ):

    sys.stdout.write( "[+] removing %d lines from %s\n" % (n_lines,file) )
    cmd = "sed -i -e '1," + str(n_lines) + "d' " + file
    print( cmd )

    try:
        output = subprocess.check_output( cmd, shell=True ).decode('utf-8')
    except Exception as e:
        sys.stdout.write( "%s[-] error occurred: %s%s\n" % (fg('red'),e,attr(0)) )
        return


#
# run the interpreter of the output of the resolver
#
def runInterpreter( domain ):

    domain_dir = domains_dir + '/' + domain

    cmd = dnspy_dir + '/interpreter.py -f ' + dnspy_dir + '/fingerprints.json -s ' + domain_dir + '/resolve.txt | tee -a ' + domain_dir + '/takeovers | tee -a ' + takeovers_file
    print( cmd )

    try:
        output = subprocess.check_output( cmd, shell=True ).decode('utf-8')
    except Exception as e:
        sys.stdout.write( "%s[-] %s error occurred: %s%s\n" % (fg('red'),domain,e,attr(0)) )
        return False

    return True


#
# run the whole shit for a single domain
#
def runDomain( domain ):

    print( "handling "+domain )

    domain_dir = domains_dir + '/' + domain

    if not os.path.isdir(domain_dir):
        sys.stdout.write( "%s[-] %s something went wrong, domain dir doesn't exist%s\n" % (fg('red'),domain,attr(0)) )
        return

    resolve_file = domain_dir + '/resolve.txt'

    if not os.path.isfile(resolve_file):
        sys.stdout.write( "%s[-] %s something went wrong, resolve file doesn't exist%s\n" % (fg('red'),domain,attr(0)) )
        return

    if not runInterpreter( domain ):
        return

    return


#
# MAIN
#
loop_sleep = 5
read_lines = 1
dnspy_dir = os.path.dirname( os.path.abspath(__file__) )
domains_dir = dnspy_dir + '/domains'
queue_file = dnspy_dir + '/queue_interpreter'
takeovers_file = dnspy_dir + '/takeovers'

if not os.path.isfile(queue_file):
    fp = open( queue_file, 'w' )
    fp.close()


n_loop = 1

while( n_loop ):

    time.sleep( loop_sleep )

    sys.stdout.write( "[*] running loop %d\n" % n_loop )
    n_loop += 1


    cmd = 'head -n ' + str(read_lines) + ' ' + queue_file
    print( cmd )

    try:
        output = subprocess.check_output( cmd, shell=True ).decode('utf-8')
    except Exception as e:
        sys.stdout.write( "%s[-] error occurred: %s%s\n" % (fg('red'),e,attr(0)) )
        continue

    output = output.strip()

    if not len(output):
        sys.stdout.write( "[-] %s input file is empty\n" % queue_file )
        # time.sleep( 3 )
        continue

    t_output = output.split("\n")
    sys.stdout.write( "[+] %d domains to test\n" % len(t_output) )

    for domain in t_output:
        runDomain( domain )

    truncateFile( queue_file, read_lines )