Enumerator/HackerOne.py at master · devsecboy/Enumerator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
import sys
import requests
from bs4 import BeautifulSoup
import os
import urllib2
import string
import json
from GlobalVariables import *

class HackerOne:
    def __init__(self):
        self.globalVariables=GlobalVariables()

    def EnumerateHackerOne(self, domain, nodomain, wildcardDomain):
        try:
            i=1
            while i <= self.globalVariables.totalHackeronePage:
                request = requests.get(self.globalVariables.hackerOneProgramsURL+str(i), headers=self.globalVariables.httpUAHeader, timeout=10)
                data = json.loads(request.text)
                for program in data['results']:
                    programURL = self.globalVariables.hackerOneURL + program['url']
                    programName = program['name']

                    try:
                        programURL=string.replace(programURL, '//', '/')
                        programURL=string.replace(programURL, ':/', '://')
                        newRequest = requests.get(programURL, headers=self.globalVariables.httpUAHeader, timeout=10)
                        scopes = json.loads(newRequest.text)
                        if len(scopes['scopes']) > 0:
                            for hostname in scopes['scopes']:
                                print hostname
                                if len(hostname) > 0:
                                    if hostname[0] == '*':
                                        wildcardDomain.append(hostname);
                                    else:
                                        domain.append(hostname);
                        else:
                            nodomain.append(programURL);
                    except Exception as exception:
                        print exception
                    else:
                        pass
                    finally:
                        pass
                i=i+1
        except Exception as e:
            print e
        else:
            pass
        finally:
            pass