bbot 2.7.1.7169rc0__py3-none-any.whl → 2.7.1.7198rc0__py3-none-any.whl

bbot/__init__.py

@@ -1,5 +1,5 @@
 # version placeholder (replaced by poetry-dynamic-versioning)
-__version__ = "v2.7.1.7169rc"
+__version__ = "v2.7.1.7198rc"
 
 from .scanner import Scanner, Preset
 

bbot/modules/emailformat.py

@@ -15,13 +15,29 @@ class emailformat(BaseModule):
 
     base_url = "https://www.email-format.com"
 
+    async def setup(self):
+        self.cfemail_regex = self.helpers.re.compile(r'data-cfemail="([0-9a-z]+)"')
+        return True
+
     async def handle_event(self, event):
         _, query = self.helpers.split_domain(event.data)
         url = f"{self.base_url}/d/{self.helpers.quote(query)}/"
         r = await self.api_request(url)
         if not r:
             return
-        for email in await self.helpers.re.extract_emails(r.text):
+
+        encrypted_emails = await self.helpers.re.findall(self.cfemail_regex, r.text)
+
+        for enc in encrypted_emails:
+            enc_len = len(enc)
+
+            if enc_len < 2 or enc_len % 2 != 0:
+                continue
+
+            key = int(enc[:2], 16)
+
+            email = "".join([chr(int(enc[i : i + 2], 16) ^ key) for i in range(2, enc_len, 2)]).lower()
+
             if email.endswith(query):
                 await self.emit_event(
                     email,

bbot/test/test_step_2/module_tests/test_module_emailformat.py

@@ -5,7 +5,7 @@ class TestEmailFormat(ModuleTestBase):
     async def setup_before_prep(self, module_test):
         module_test.httpx_mock.add_response(
             url="https://www.email-format.com/d/blacklanternsecurity.com/",
-            text="<p>info@blacklanternsecurity.com</a>",
+            text="""<a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="0a63646c654a68666b6961666b647e6f7864796f697f78637e7324696567">[email&#160;protected]</a>""",
         )
 
     def check(self, module_test, events):

bbot/test/test_step_2/module_tests/test_module_emails.py

@@ -1,13 +1,13 @@
 from .base import ModuleTestBase
 
 
-class TestEmais(ModuleTestBase):
+class TestEmails(ModuleTestBase):
     modules_overrides = ["emails", "emailformat", "skymem"]
 
     async def setup_before_prep(self, module_test):
         module_test.httpx_mock.add_response(
             url="https://www.email-format.com/d/blacklanternsecurity.com/",
-            text="<p>info@blacklanternsecurity.com</p>",
+            text="""<a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="0a63646c654a68666b6961666b647e6f7864796f697f78637e7324696567">[email&#160;protected]</a>""",
         )
         module_test.httpx_mock.add_response(
             url="https://www.skymem.info/srch?q=blacklanternsecurity.com",

{bbot-2.7.1.7169rc0.dist-info → bbot-2.7.1.7198rc0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bbot
-Version: 2.7.1.7169rc0
+Version: 2.7.1.7198rc0
 Summary: OSINT automation for hackers.
 License: GPL-3.0
 License-File: LICENSE

{bbot-2.7.1.7169rc0.dist-info → bbot-2.7.1.7198rc0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-bbot/__init__.py,sha256=e4wLF6Bbco6_B_zwqkTO8RTOhnkprezPOldMHih2CT4,163
+bbot/__init__.py,sha256=pybipPOWcSe5kwo7vjCERBtFlrbHUP_U2k0dqXXCZPY,163
 bbot/cli.py,sha256=1QJbANVw9Q3GFM92H2QRV2ds5756ulm08CDZwzwPpeI,11888
 bbot/core/__init__.py,sha256=l255GJE_DvUnWvrRb0J5lG-iMztJ8zVvoweDOfegGtI,46
 bbot/core/config/__init__.py,sha256=zYNw2Me6tsEr8hOOkLb4BQ97GB7Kis2k--G81S8vofU,342
@@ -77,7 +77,6 @@ bbot/modules/bufferoverrun.py,sha256=VTNkT96Escy6Lyt0LCuyNPNp8wCHBtPM95WxPY7rxUk
 bbot/modules/builtwith.py,sha256=6ZQOc6vmSVc8LsdgsiuMWfDquGm5K0jxwsnL8MsKNWw,5381
 bbot/modules/bypass403.py,sha256=HyONgOYlZUET61FZ0QWE7zPGG-N6n0x_j9KUGw8kVxQ,6855
 bbot/modules/c99.py,sha256=l4HpFtKF09zUs5-yZIMmZU4oIUNro6aRcG6DlIeJ6Z0,1473
-bbot/modules/censys.py,sha256=PMf96B3vTwUF0uotitbNtGPgPIlKl1feyDzBJRn14D0,3336
 bbot/modules/certspotter.py,sha256=qdRGCkGyP07_cP9h2o_AEZwoiQPXtrC-Bel3vgh24x8,905
 bbot/modules/chaos.py,sha256=JyuwytwE3IRmNbw-uyJ0gCaTnywhhsHzTiZ3OJ15PAw,1573
 bbot/modules/code_repository.py,sha256=x70Z45VnNNMF8BPkHfGWZXsZXw_fStGB3y0-8jbP1Ns,2078
@@ -96,7 +95,7 @@ bbot/modules/dnstlsrpt.py,sha256=v8V72RBsawmDPrMrTcKXEyoFt9bgbfm-cpoPYgKEKLQ,623
 bbot/modules/docker_pull.py,sha256=zNQcQdS-JWM2-TbQ_iyjeGA9CKcpuXdeO5ucoJgzZNY,9189
 bbot/modules/dockerhub.py,sha256=JQkujjqvQRzQuvHjQ7JbFs_VlJj8dLRPRObAkBgUQhc,3493
 bbot/modules/dotnetnuke.py,sha256=zipcHyNYr2FEecStb1Yrm938ps01RvHV8NnyqAvnGGc,10537
-bbot/modules/emailformat.py,sha256=RLPJW-xitYB-VT4Lp08qVzFkXx_kMyV_035JT_Yf4fM,1082
+bbot/modules/emailformat.py,sha256=Koi2aSng-FSRJVhpbFaclrqZxo4lQoPMcUMn_qXTfVE,1518
 bbot/modules/extractous.py,sha256=VSGKmHPAA_4r62jaN8Yqi3JcjehjxpI2lhe8i2j786s,4648
 bbot/modules/ffuf.py,sha256=94TJ5xvqKwH0JaWmC_t1dLTpRsO8HEy4lnbsu8LF_HY,14965
 bbot/modules/ffuf_shortnames.py,sha256=y5vnypLPN-KrjpmoG5zlqcX8VwfcLBpNg1yQI7bP9Hg,18737
@@ -220,7 +219,6 @@ bbot/modules/wafw00f.py,sha256=1Yh5_MF-W1r8LhDOkJ44z-S1PJ9x07UB9MrGFm9Eb7Y,2541
 bbot/modules/wappalyzer.py,sha256=ix0JnLEQ4wLfvYuzrOlQuupJZc3AiY8bnGs3ne-qCFA,2190
 bbot/modules/wayback.py,sha256=9cxd_HfHgLp4AChzA8C0Zjd6DIJ7c3NsJ02W2oLIXuU,3257
 bbot/modules/wpscan.py,sha256=FVqZpjV3GrejjiowiqdwIb8t_pPl9yMVRtsAMzC-heA,11606
-bbot/modules/zoomeye.py,sha256=DYrNAgvHY90HKui3LvEVHBw0M2cpkuzuyVqizBzp6T8,2755
 bbot/presets/baddns-intense.yml,sha256=FXiNnsf3IIms3UJtS2CwLk82Yp0IXm1OvRM61-CHrno,195
 bbot/presets/cloud-enum.yml,sha256=U1IuN_Vx4zFSvobQenXwSeEqFxRX28beS1Aek3hNUBg,121
 bbot/presets/code-enum.yml,sha256=fRThe5_vY8IqO5nZBC0y3JZwA6ynx81bBcIHBB6o9IU,83
@@ -332,7 +330,6 @@ bbot/test/test_step_2/module_tests/test_module_bufferoverrun.py,sha256=6pyJ0dbx8
 bbot/test/test_step_2/module_tests/test_module_builtwith.py,sha256=lMHyF4YXcIRoXMMaqiVaMilDcitnGggM67e0lbxA1Ic,5049
 bbot/test/test_step_2/module_tests/test_module_bypass403.py,sha256=IvYZ04K0zt27CT8oc59mLuIuPJxnylKeMulPyDCR9UI,3552
 bbot/test/test_step_2/module_tests/test_module_c99.py,sha256=F-46Kkwxe29xPZ-3kxCklPR_itOTKcL37uRpUh2F1C4,7405
-bbot/test/test_step_2/module_tests/test_module_censys.py,sha256=XTkPvewW3fLZMnHWPsWOJ170kYzF1s0doXoUmmPpoMA,4219
 bbot/test/test_step_2/module_tests/test_module_certspotter.py,sha256=60jCOeK1yaUEgtTxYW-T47kZgKt9XxP2qBH9w-0MDBk,636
 bbot/test/test_step_2/module_tests/test_module_chaos.py,sha256=9JRgtDEnnJgmEMCTB2bqRJRkBavLys-6ypHPxrM_hXk,956
 bbot/test/test_step_2/module_tests/test_module_cloudcheck.py,sha256=9KjGREpzOVByDVjIEWoaWbS3RwPlYLN3mw-OnRvD7sg,4083
@@ -355,8 +352,8 @@ bbot/test/test_step_2/module_tests/test_module_dnstlsrpt.py,sha256=8xXSFo0vwKfeh
 bbot/test/test_step_2/module_tests/test_module_docker_pull.py,sha256=SKc43IKzwoi74qaY8felJXnrgNVXrXRQlg6BtrSjyAc,28151
 bbot/test/test_step_2/module_tests/test_module_dockerhub.py,sha256=9T8CFcFP32MOppUmSVNBUSifnk2kMONqzW_7vvvKdpk,3907
 bbot/test/test_step_2/module_tests/test_module_dotnetnuke.py,sha256=Q7M3hrbEwOuORZXPS-pIGFTRzB2-g4cEvGtsEcTp7t8,8049
-bbot/test/test_step_2/module_tests/test_module_emailformat.py,sha256=cKxBPnEQ4AiRKV_-hSYEE6756ypst3hi6MN0L5RTukY,461
-bbot/test/test_step_2/module_tests/test_module_emails.py,sha256=bZjtO8N3GG2_g6SUEYprAFLcsi7SlwNPJJ0nODfrWYU,944
+bbot/test/test_step_2/module_tests/test_module_emailformat.py,sha256=nXXURJfwmA8q9hQvdmLTP-1obzbDGruW_PpolX2e7RY,590
+bbot/test/test_step_2/module_tests/test_module_emails.py,sha256=6T0zwDMK3d-3t01RGEbd4KeTF-UG7EReOvlyd6qwqig,1074
 bbot/test/test_step_2/module_tests/test_module_excavate.py,sha256=AUh9fegqoxZjZHISWryuJgK3HJqKEUhFsRtMTROFfa4,63067
 bbot/test/test_step_2/module_tests/test_module_extractous.py,sha256=6wuZ978y5YIPYdR7av6otrY_5jUlzzuJDZ-DsBNOoLA,18197
 bbot/test/test_step_2/module_tests/test_module_ffuf.py,sha256=z8ihAM1WYss7QGXIjbi67cekg8iOemDjaM8YR9_qSEs,4100
@@ -450,7 +447,6 @@ bbot/test/test_step_2/module_tests/test_module_web_parameters.py,sha256=cK6F15Tx
 bbot/test/test_step_2/module_tests/test_module_web_report.py,sha256=5h4yAl_z265UyQXq9V3hNEeqhJhNhBM2hshWOQ_7hH8,2928
 bbot/test/test_step_2/module_tests/test_module_websocket.py,sha256=eBtHJtTeGdCGtVofpFiliFRU_9zIc5czuqjb8If7g9Q,1030
 bbot/test/test_step_2/module_tests/test_module_wpscan.py,sha256=ACGnHsavQy4uRJYoosE1JD-eJFdOj50G65P2FhIqRrM,35772
-bbot/test/test_step_2/module_tests/test_module_zoomeye.py,sha256=mEaMYa9ytxSMDIR1csmK1k7F1UrbolqEwZtqGRhA-OY,1979
 bbot/test/test_step_2/template_tests/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 bbot/test/test_step_2/template_tests/test_template_subdomain_enum.py,sha256=DrLd0m88Iy3JBs29CiDFguRntCUeKyQX09pYN5oabf8,8618
 bbot/test/testsslcert.pem,sha256=ymc1o3bnm1WOUFLcOrw7TegnaOwN0TnUpScl7WXmicE,1103
@@ -464,8 +460,8 @@ bbot/wordlists/raft-small-extensions-lowercase_CLEANED.txt,sha256=ZSIVebs7ptMvHx
 bbot/wordlists/top_open_ports_nmap.txt,sha256=LmdFYkfapSxn1pVuQC2LkOIY2hMLgG-Xts7DVtYzweM,42727
 bbot/wordlists/valid_url_schemes.txt,sha256=0B_VAr9Dv7aYhwi6JSBDU-3M76vNtzN0qEC_RNLo7HE,3310
 bbot/wordlists/wordninja_dns.txt.gz,sha256=DYHvvfW0TvzrVwyprqODAk4tGOxv5ezNmCPSdPuDUnQ,570241
-bbot-2.7.1.7169rc0.dist-info/METADATA,sha256=LdDWEvoGkvwXsZyIj0ZejsE8FuvVVnF_SR0-bjVlIbQ,18420
-bbot-2.7.1.7169rc0.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-bbot-2.7.1.7169rc0.dist-info/entry_points.txt,sha256=cWjvcU_lLrzzJgjcjF7yeGuRA_eDS8pQ-kmPUAyOBfo,38
-bbot-2.7.1.7169rc0.dist-info/licenses/LICENSE,sha256=GzeCzK17hhQQDNow0_r0L8OfLpeTKQjFQwBQU7ZUymg,32473
-bbot-2.7.1.7169rc0.dist-info/RECORD,,
+bbot-2.7.1.7198rc0.dist-info/METADATA,sha256=JYtrZwyTVrZ3wOiYsgEM3xZm1MZ7STDWa70Sbtv26KE,18420
+bbot-2.7.1.7198rc0.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+bbot-2.7.1.7198rc0.dist-info/entry_points.txt,sha256=cWjvcU_lLrzzJgjcjF7yeGuRA_eDS8pQ-kmPUAyOBfo,38
+bbot-2.7.1.7198rc0.dist-info/licenses/LICENSE,sha256=GzeCzK17hhQQDNow0_r0L8OfLpeTKQjFQwBQU7ZUymg,32473
+bbot-2.7.1.7198rc0.dist-info/RECORD,,

bbot/modules/censys.py

@@ -1,98 +0,0 @@
-from bbot.modules.templates.subdomain_enum import subdomain_enum_apikey
-
-
-class censys(subdomain_enum_apikey):
-    """
-    thanks to https://github.com/owasp-amass/amass/blob/master/resources/scripts/cert/censys.ads
-    """
-
-    watched_events = ["DNS_NAME"]
-    produced_events = ["DNS_NAME"]
-    flags = ["subdomain-enum", "passive", "safe"]
-    meta = {
-        "description": "Query the Censys API",
-        "created_date": "2022-08-04",
-        "author": "@TheTechromancer",
-        "auth_required": True,
-    }
-    options = {"api_key": "", "max_pages": 5}
-    options_desc = {
-        "api_key": "Censys.io API Key in the format of 'key:secret'",
-        "max_pages": "Maximum number of pages to fetch (100 results per page)",
-    }
-
-    base_url = "https://search.censys.io/api"
-
-    async def setup(self):
-        self.max_pages = self.config.get("max_pages", 5)
-        return await super().setup()
-
-    async def ping(self):
-        url = f"{self.base_url}/v1/account"
-        resp = await self.api_request(url, retry_on_http_429=False)
-        d = resp.json()
-        assert isinstance(d, dict), f"Invalid response from {url}: {resp}"
-        quota = d.get("quota", {})
-        used = int(quota.get("used", 0))
-        allowance = int(quota.get("allowance", 0))
-        assert used < allowance, "No quota remaining"
-
-    def prepare_api_request(self, url, kwargs):
-        api_id, api_secret = self.api_key.split(":", 1)
-        kwargs["auth"] = (api_id, api_secret)
-        return url, kwargs
-
-    async def query(self, query):
-        results = set()
-        cursor = ""
-        for i in range(self.max_pages):
-            url = f"{self.base_url}/v2/certificates/search"
-            json_data = {
-                "q": f"names: {query}",
-                "per_page": 100,
-            }
-            if cursor:
-                json_data.update({"cursor": cursor})
-            resp = await self.api_request(
-                url,
-                method="POST",
-                json=json_data,
-            )
-
-            if resp is None:
-                break
-
-            try:
-                d = resp.json()
-            except Exception as e:
-                self.warning(f"Failed to parse JSON from {url} (response: {resp}): {e}")
-
-            if resp.status_code < 200 or resp.status_code >= 400:
-                if isinstance(d, dict):
-                    error = d.get("error", "")
-                    if error:
-                        self.warning(error)
-                self.verbose(f'Non-200 Status code: {resp.status_code} for query "{query}", page #{i + 1}')
-                self.debug(f"Response: {resp.text}")
-                break
-            else:
-                if d is None:
-                    break
-                elif not isinstance(d, dict):
-                    break
-                status = d.get("status", "").lower()
-                result = d.get("result", {})
-                hits = result.get("hits", [])
-                if status != "ok" or not hits:
-                    break
-
-                for h in hits:
-                    names = h.get("names", [])
-                    for n in names:
-                        results.add(n.strip(".*").lower())
-
-                cursor = result.get("links", {}).get("next", "")
-                if not cursor:
-                    break
-
-        return results

bbot/modules/zoomeye.py

@@ -1,77 +0,0 @@
-from bbot.modules.templates.subdomain_enum import subdomain_enum_apikey
-
-
-class zoomeye(subdomain_enum_apikey):
-    watched_events = ["DNS_NAME"]
-    produced_events = ["DNS_NAME"]
-    flags = ["affiliates", "subdomain-enum", "passive", "safe"]
-    meta = {
-        "description": "Query ZoomEye's API for subdomains",
-        "created_date": "2022-08-03",
-        "author": "@TheTechromancer",
-        "auth_required": True,
-    }
-    options = {"api_key": "", "max_pages": 20, "include_related": False}
-    options_desc = {
-        "api_key": "ZoomEye API key",
-        "max_pages": "How many pages of results to fetch",
-        "include_related": "Include domains which may be related to the target",
-    }
-
-    base_url = "https://api.zoomeye.hk"
-
-    async def setup(self):
-        self.max_pages = self.config.get("max_pages", 20)
-        self.include_related = self.config.get("include_related", False)
-        return await super().setup()
-
-    def prepare_api_request(self, url, kwargs):
-        kwargs["headers"]["API-KEY"] = self.api_key
-        return url, kwargs
-
-    async def ping(self):
-        url = f"{self.base_url}/resources-info"
-        r = await self.api_request(url, retry_on_http_429=False)
-        assert int(r.json()["quota_info"]["remain_total_quota"]) > 0, "No quota remaining"
-
-    async def handle_event(self, event):
-        query = self.make_query(event)
-        results = await self.query(query)
-        if results:
-            for hostname in results:
-                if hostname == event:
-                    continue
-                tags = []
-                if not hostname.endswith(f".{query}"):
-                    tags = ["affiliate"]
-                await self.emit_event(
-                    hostname,
-                    "DNS_NAME",
-                    event,
-                    tags=tags,
-                    context=f'{{module}} searched ZoomEye API for "{query}" and found {{event.type}}: {{event.data}}',
-                )
-
-    async def query(self, query):
-        results = set()
-        query_type = 0 if self.include_related else 1
-        url = f"{self.base_url}/domain/search?q={self.helpers.quote(query)}&type={query_type}&page=" + "{page}"
-        i = 0
-        agen = self.api_page_iter(url)
-        try:
-            async for j in agen:
-                r = list(await self.parse_results(j))
-                if r:
-                    results.update(set(r))
-                if not r or i >= (self.max_pages - 1):
-                    break
-                i += 1
-        finally:
-            await agen.aclose()
-        return results
-
-    async def parse_results(self, r):
-        results = set()
-        for entry in r.get("list", []):
-            results.add(entry["name"])
-        return results

bbot/test/test_step_2/module_tests/test_module_censys.py

@@ -1,83 +0,0 @@
-from .base import ModuleTestBase
-
-
-class TestCensys(ModuleTestBase):
-    config_overrides = {"modules": {"censys": {"api_key": "api_id:api_secret"}}}
-
-    async def setup_before_prep(self, module_test):
-        module_test.httpx_mock.add_response(
-            url="https://search.censys.io/api/v1/account",
-            match_headers={"Authorization": "Basic YXBpX2lkOmFwaV9zZWNyZXQ="},
-            json={
-                "email": "info@blacklanternsecurity.com",
-                "login": "nope",
-                "first_login": "1917-08-03 20:03:55",
-                "last_login": "1918-05-19 01:15:22",
-                "quota": {"used": 26, "allowance": 250, "resets_at": "1919-06-03 16:30:32"},
-            },
-        )
-        module_test.httpx_mock.add_response(
-            url="https://search.censys.io/api/v2/certificates/search",
-            match_headers={"Authorization": "Basic YXBpX2lkOmFwaV9zZWNyZXQ="},
-            method="POST",
-            match_json={"q": "names: blacklanternsecurity.com", "per_page": 100},
-            json={
-                "code": 200,
-                "status": "OK",
-                "result": {
-                    "query": "names: blacklanternsecurity.com",
-                    "total": 196,
-                    "duration_ms": 1046,
-                    "hits": [
-                        {
-                            "parsed": {
-                                "validity_period": {
-                                    "not_before": "2021-11-18T00:09:46Z",
-                                    "not_after": "2022-11-18T00:09:46Z",
-                                },
-                                "issuer_dn": "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com\\, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2",
-                                "subject_dn": "CN=asdf.blacklanternsecurity.com",
-                            },
-                            "fingerprint_sha256": "590ad51b8db62925f0fd3f300264c6a36692e20ceec2b5a22e7e4b41c1575cdc",
-                            "names": ["asdf.blacklanternsecurity.com", "asdf2.blacklanternsecurity.com"],
-                        },
-                    ],
-                    "links": {"next": "NextToken", "prev": ""},
-                },
-            },
-        )
-        module_test.httpx_mock.add_response(
-            url="https://search.censys.io/api/v2/certificates/search",
-            match_headers={"Authorization": "Basic YXBpX2lkOmFwaV9zZWNyZXQ="},
-            method="POST",
-            match_json={"q": "names: blacklanternsecurity.com", "per_page": 100, "cursor": "NextToken"},
-            json={
-                "code": 200,
-                "status": "OK",
-                "result": {
-                    "query": "names: blacklanternsecurity.com",
-                    "total": 196,
-                    "duration_ms": 1046,
-                    "hits": [
-                        {
-                            "parsed": {
-                                "validity_period": {
-                                    "not_before": "2021-11-18T00:09:46Z",
-                                    "not_after": "2022-11-18T00:09:46Z",
-                                },
-                                "issuer_dn": "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com\\, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2",
-                                "subject_dn": "CN=zzzz.blacklanternsecurity.com",
-                            },
-                            "fingerprint_sha256": "590ad51b8db62925f0fd3f300264c6a36692e20ceec2b5a22e7e4b41c1575cdc",
-                            "names": ["zzzz.blacklanternsecurity.com"],
-                        },
-                    ],
-                    "links": {"next": "", "prev": ""},
-                },
-            },
-        )
-
-    def check(self, module_test, events):
-        assert any(e.data == "asdf.blacklanternsecurity.com" for e in events), "Failed to detect asdf subdomain"
-        assert any(e.data == "asdf2.blacklanternsecurity.com" for e in events), "Failed to detect asdf2 subdomain"
-        assert any(e.data == "zzzz.blacklanternsecurity.com" for e in events), "Failed to detect zzzz subdomain"

bbot/test/test_step_2/module_tests/test_module_zoomeye.py

@@ -1,35 +0,0 @@
-from .base import ModuleTestBase
-
-
-class TestZoomEye(ModuleTestBase):
-    config_overrides = {"modules": {"zoomeye": {"api_key": "asdf", "include_related": True, "max_pages": 3}}}
-
-    async def setup_before_prep(self, module_test):
-        module_test.httpx_mock.add_response(
-            url="https://api.zoomeye.hk/resources-info",
-            match_headers={"API-KEY": "asdf"},
-            json={"quota_info": {"remain_total_quota": 5}},
-        )
-        module_test.httpx_mock.add_response(
-            url="https://api.zoomeye.hk/domain/search?q=blacklanternsecurity.com&type=0&page=1",
-            json={"list": [{"name": "asdf.blacklanternsecurity.com"}]},
-        )
-        module_test.httpx_mock.add_response(
-            url="https://api.zoomeye.hk/domain/search?q=blacklanternsecurity.com&type=0&page=2",
-            json={"list": [{"name": "zzzz.blacklanternsecurity.com"}]},
-        )
-        module_test.httpx_mock.add_response(
-            url="https://api.zoomeye.hk/domain/search?q=blacklanternsecurity.com&type=0&page=3",
-            json={"list": [{"name": "ffff.blacklanternsecurity.com"}, {"name": "affiliate.bls"}]},
-        )
-        module_test.httpx_mock.add_response(
-            url="https://api.zoomeye.hk/domain/search?q=blacklanternsecurity.com&type=0&page=4",
-            json={"list": [{"name": "nope.blacklanternsecurity.com"}]},
-        )
-
-    def check(self, module_test, events):
-        assert any(e.data == "asdf.blacklanternsecurity.com" for e in events), "Failed to detect subdomain #1"
-        assert any(e.data == "zzzz.blacklanternsecurity.com" for e in events), "Failed to detect subdomain #2"
-        assert any(e.data == "ffff.blacklanternsecurity.com" for e in events), "Failed to detect subdomain #3"
-        assert any(e.data == "affiliate.bls" and "affiliate" in e.tags for e in events), "Failed to detect affiliate"
-        assert not any(e.data == "nope.blacklanternsecurity.com" for e in events), "Failed to obey max_pages"