* Prints the message if the global "verbosity" flag exceeds this level. ***************************************************************************/

* Tests if the named parameter on the command-line. We do a little * more than a straight string compare, because I get confused * whether parameter

***************************************************************************/

Custom get request :param str url: request url :param dict params: request parameters :param bool check: check resp

***************************************************************************/

Generate results

Save module results into the database

begin log

finish log

Save the results of each module as a json file :return bool: whether saved successfully

Use regexp to match subdomains :param str domain: domain :param str text: text :param bool distinct: deduplicate

Get proxy :param str module: module name :return: proxy

Get request header :return: header

Get registered domain :param str domain: domain :return: registered domain

a convenience function which calls matchheader

* Wrap the standard 'malloc()' function. * - never returns a NULL pointer, aborts program instead * - if size is zero, still returns a valid pointer

* Parse from text an IPv4 address range. This can be in one of several * formats: * - '192.168.1.1" - a single address * - '192.168.1.0/24" - a CID

***************************************************************************/

***************************************************************************/

* This doesn't actually transmit right now. Instead, marks the payload as ready * to transmit, which will be transmitted later */

* Add the IPv4 range to our list of ranges. ***************************************************************************/

***************************************************************************/

Close the database connection

***************************************************************************/

检查crossdomain.xml收集子域名

***************************************************************************/

* Called either from the "command-line" parser when it sees a --parm, * or from the "config-file" parser for normal options. ***********************

*****************************************************************************/

* Output either a normal character, or the hex form of a UTF-8 string ***************************************************************************/

* Counts the total number of addresses in all the ranges combined. * For 0.0.0.0/0, this will be 0x100000000, which means we have to use a * larger

***************************************************************************/

Read a 32-bit value from a capture file, depending upon the byte * order within that file */

***************************************************************************/

***************************************************************************/

***************************************************************************/

* The 'status' variable contains both the open/closed info as well as the * protocol info. This splits it back out into two values. ****************

***************************************************************************/

* This is the "free" function for the list, freeing up any memory we've * allocated. ***************************************************************

* An ASN.1 length field has two formats. * - if the high-order bit of the length byte is clear, then it * encodes a length between 0 and 127. *

***************************************************************************/

***************************************************************************/

Custom post request :param str url: request url :param dict data: request data :param bool check: check response

* This returns a character pointer where parsing ends so that it can * handle multiple stuff on the same line **************************************

***************************************************************************/

***************************************************************************/

* Create the --banners systems ***************************************************************************/

***************************************************************************/

* Report simply "open" or "closed", with little additional information. * This is called directly from the receive thread when responses come * back

****************************************************************************/

生成搜索过滤语句 使用搜索引擎支持的-site:语法过滤掉搜索页面较多的子域以发现新域 :param str domain: 域名 :param set subdomain: 子域名集合 :return: 过滤语句

* Called to register a pattern with SMACK. ****************************************************************************/

****************************************************************************/

* Creates this engine, use "smack_destroy()" to free all the resources ****************************************************************************/

* Called at startup, when processing command-line options, to set * parameters specific to TCP processing. *****************************************

* This inserts the timeout entry into the appropriate place in the * timeout ring. *****************************************************************

* Does a linear search to see if the list contains the address/port. * FIXME: This should be upgraded to a binary search. However, we don't * really

发送搜索请求并做子域匹配 :param str domain: 域名 :param str filtered_subdomain: 过滤的子域 :param bool full_search: 全量搜索

* The actual 'status' variable is narrowly defined depending on the * underlying protocol. This function creates a gross "open" v. "closed" * string

***************************************************************************/

* Here we take a packet template, parse it, then make it easier to work * with. ********************************************************************

Export data from the database and do some follow-up processing :param table: table name :return: export data :rtype:

***************************************************************************/

* Dequeue one object from a ring (NOT multi-consumers safe). * * @param r * A pointer to the ring structure. * @param obj_p * A pointer to a

***************************************************************************/

*****************************************************************************/

*****************************************************************************/

***************************************************************************/

* Enqueue one object on a ring (NOT multi-producers safe). * * @param r * A pointer to the ring structure. * @param obj * A pointer to the ob

* Since ASN.1 contains nested structures, each with their own length field, * we must maintain a small stack as we parse down the structure. Every ti

*****************************************************************************/

***************************************************************************/

* When outputing results, we call this function to print out the type of * banner that we've collected ********************************************

****************************************************************************/

****************************************************************************/

向接口查询子域并做子域匹配

Query the TXT record of domain :return: query result

***************************************************************************/

***************************************************************************/