scopes_extractor 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2720124a1d479958f99a1e40d303f5a8fa1fb45727b7c575197561522245cd3f
-  data.tar.gz: bc579dc76168344ac983876d54db4b55977099e6488fbe26a0971bf85488af35
+  metadata.gz: 9213285da286cb2ad488374dc8e5971d34bb06987b710c2bbd4dcac12f3d1384
+  data.tar.gz: af84cd2c4e8e8a43ccb40f126bc1996e812bf66b828e2a3b4aea6bd5dcba9531
 SHA512:
-  metadata.gz: 9b5387a228e502be7cd36c5ea4e67151ece0a046406931619c159c17d4345069b0885b5de27683a63190b5ac0a108023dc7524e406e836179eb12cf820c6be41
-  data.tar.gz: 784560b6ed8def4699d7c3e03a34ee02ef5db707183acc7d702e3c058cf0bb0df0c38ceca648609f24cb79941d10dd78bc1f64b8dd4583098bef70dcb19c6f78
+  metadata.gz: 20bbb233618c27774be21ab80ac56e8e9ac2b6e749922bdb1768c634b30f7b7b04f23e622f0a958ddc257e6ed5ef1239fb94aec973eafbfe0c20c3300c831d60
+  data.tar.gz: 5612a5f74b44fd9904e0f7b3ba22218104ee68e36ca27b15dbcaf8f437e22e74f680f997a832d64ddf0580f4f0d8421baac3532aee8537a8c587f48c45bf7369

data/lib/scopes_extractor/http_client.rb

@@ -2,10 +2,12 @@
 
 # HttpClient Class
 class HttpClient
-  @request_options = {
-    ssl_verifypeer: false,
-    ssl_verifyhost: 0
-  }
+  def self.request_options
+    {
+      ssl_verifypeer: false,
+      ssl_verifyhost: 0
+    }
+  end
 
   def self.headers(url, authentication)
     if url.include?('yeswehack')
@@ -15,23 +17,25 @@ class HttpClient
     elsif url.include?('bugcrowd')
       { 'Cookie' => authentication }
     elsif url.include?('hackerone')
-      @request_options[:userpwd] = "#{ENV.fetch('H1_USERNAME', nil)}:#{ENV.fetch('H1_API_KEY', nil)}"
-      { 'Accept' => 'application/json' }
+      h1_credz = Base64.urlsafe_encode64("#{ENV.fetch('H1_USERNAME', nil)}:#{ENV.fetch('H1_API_KEY', nil)}")
+      { 'Accept' => 'application/json', 'Authorization' => "Basic #{h1_credz}" }
     else
       { 'Content-Type' => 'application/json' }
     end
   end
 
   def self.get(url, authentication = nil)
-    @request_options[:headers] = headers(url, authentication)
+    options = request_options
+    options[:headers] = headers(url, authentication)
 
-    Typhoeus.get(url, @request_options)
+    Typhoeus.get(url, options)
   end
 
   def self.post(url, data)
-    @request_options[:headers] = { 'Content-Type' => 'application/json' }
-    @request_options[:body] = data
+    options = request_options
+    options[:headers] = { 'Content-Type' => 'application/json' }
+    options[:body] = data
 
-    Typhoeus.post(url, @request_options)
+    Typhoeus.post(url, options)
   end
 end

data/lib/scopes_extractor.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require 'base64'
 require 'dotenv'
 require 'json'
 require 'rotp'
@@ -56,6 +57,8 @@ class ScopesExtractor
       Hackerone::Programs.sync(results['Hackerone'], options)
     end
 
+    File.open('extract.json', 'w') { |f| f.write(JSON.pretty_generate(results)) } if options[:save]
+
     results
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: scopes_extractor
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Joshua MARTINELLE
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-16 00:00:00.000000000 Z
+date: 2023-05-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize