mirror of https://github.com/MISP/PyMISP
192 lines
5.8 KiB
Python
192 lines
5.8 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
import ipaddress
|
|
import socket
|
|
import idna
|
|
from publicsuffixlist import PublicSuffixList
|
|
from urllib.parse import urlparse, urlunparse
|
|
|
|
|
|
class UrlNotDecoded(Exception):
|
|
pass
|
|
|
|
|
|
class PSLFaup(object):
|
|
"""
|
|
Fake Faup Python Library using PSL for Windows support
|
|
"""
|
|
|
|
def __init__(self):
|
|
self.decoded = False
|
|
self.psl = PublicSuffixList()
|
|
self._url = None
|
|
self._retval = {}
|
|
self.ip_as_host = False
|
|
|
|
def _clear(self):
|
|
self.decoded = False
|
|
self._url = None
|
|
self._retval = {}
|
|
self.ip_as_host = False
|
|
|
|
def decode(self, url) -> None:
|
|
"""
|
|
This function creates a dict of all the url fields.
|
|
:param url: The URL to normalize
|
|
"""
|
|
self._clear()
|
|
if isinstance(url, bytes) and b'//' not in url[:10]:
|
|
url = b'//' + url
|
|
elif '//' not in url[:10]:
|
|
url = '//' + url
|
|
self._url = urlparse(url)
|
|
|
|
self.ip_as_host = False
|
|
hostname = _ensure_str(self._url.hostname)
|
|
try:
|
|
ipv4_bytes = socket.inet_aton(_ensure_str(hostname))
|
|
ipv4 = ipaddress.IPv4Address(ipv4_bytes)
|
|
self.ip_as_host = ipv4.compressed
|
|
except (OSError, ValueError):
|
|
try:
|
|
addr, _, _ = hostname.partition('%')
|
|
ipv6 = ipaddress.IPv6Address(addr)
|
|
self.ip_as_host = ipv6.compressed
|
|
except ValueError:
|
|
pass
|
|
|
|
self.decoded = True
|
|
self._retval = {}
|
|
|
|
@property
|
|
def url(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
netloc = self.get_host() + ('' if self.get_port() is None else ':{}'.format(self.get_port()))
|
|
return _ensure_bytes(
|
|
urlunparse(
|
|
(self.get_scheme(), netloc, self.get_resource_path(),
|
|
'', self.get_query_string(), self.get_fragment(),)
|
|
)
|
|
)
|
|
|
|
def get_scheme(self):
|
|
"""
|
|
Get the scheme of the url given in the decode function
|
|
:returns: The URL scheme
|
|
"""
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
return _ensure_str(self._url.scheme)
|
|
|
|
def get_credential(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self._url.password:
|
|
return _ensure_str(self._url.username) + ':' + _ensure_str(self._url.password)
|
|
if self._url.username:
|
|
return _ensure_str(self._url.username)
|
|
|
|
def get_subdomain(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self.get_host() is not None and not self.ip_as_host:
|
|
if self.get_domain() in self.get_host():
|
|
return self.get_host().rsplit(self.get_domain(), 1)[0].rstrip('.') or None
|
|
|
|
def get_domain(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self.get_host() is not None and not self.ip_as_host:
|
|
return self.psl.privatesuffix(self.get_host())
|
|
|
|
def get_domain_without_tld(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self.get_tld() is not None and not self.ip_as_host:
|
|
return self.get_domain().rsplit(self.get_tld(), 1)[0].rstrip('.')
|
|
|
|
def get_host(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self._url.hostname is None:
|
|
return None
|
|
elif self._url.hostname.isascii():
|
|
return _ensure_str(self._url.hostname)
|
|
else:
|
|
return _ensure_str(idna.encode(self._url.hostname, uts46=True))
|
|
|
|
def get_unicode_host(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if not self.ip_as_host:
|
|
return idna.decode(self.get_host(), uts46=True)
|
|
|
|
def get_tld(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
if self.get_host() is not None and not self.ip_as_host:
|
|
return self.psl.publicsuffix(self.get_host())
|
|
|
|
def get_port(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
return self._url.port
|
|
|
|
def get_resource_path(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
return _ensure_str(self._url.path)
|
|
|
|
def get_query_string(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
return _ensure_str(self._url.query)
|
|
|
|
def get_fragment(self):
|
|
if not self.decoded:
|
|
raise UrlNotDecoded("You must call faup.decode() first")
|
|
|
|
return _ensure_str(self._url.fragment)
|
|
|
|
def get(self):
|
|
self._retval["scheme"] = self.get_scheme()
|
|
self._retval["tld"] = self.get_tld()
|
|
self._retval["domain"] = self.get_domain()
|
|
self._retval["domain_without_tld"] = self.get_domain_without_tld()
|
|
self._retval["subdomain"] = self.get_subdomain()
|
|
self._retval["host"] = self.get_host()
|
|
self._retval["port"] = self.get_port()
|
|
self._retval["resource_path"] = self.get_resource_path()
|
|
self._retval["query_string"] = self.get_query_string()
|
|
self._retval["fragment"] = self.get_fragment()
|
|
self._retval["url"] = self.url
|
|
return self._retval
|
|
|
|
|
|
def _ensure_bytes(binary) -> bytes:
|
|
if isinstance(binary, bytes):
|
|
return binary
|
|
else:
|
|
return binary.encode('utf-8')
|
|
|
|
|
|
def _ensure_str(string) -> str:
|
|
if isinstance(string, str):
|
|
return string
|
|
else:
|
|
return string.decode('utf-8')
|