Codebase list osrframework / 5315caf osrframework / transforms / expandPropertiesFromI3visioEntity.py
5315caf

Tree @5315caf (Download .tar.gz)

expandPropertiesFromI3visioEntity.py @5315caf — raw · history · blame 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# !/usr/bin/python
# -*- coding: cp1252 -*-
#
##################################################################################
#
#    Copyright 2015 Félix Brezo and Yaiza Rubio (i3visio, [email protected])
#
#    This program is part of OSRFramework. You can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
##################################################################################

from osrframework.transforms.lib.maltego import *
import sys
import json
import osrframework.transforms.lib.constants as constants

def expandPropertiesFromI3visioEntity(argv):
    ''' 
        Method that expands the properties from a given i3visio entity. It is useful to create new Entities based on the contents of the properties.
        :param argv:    the serialized entity.

        :return:    Nothing is returned but the code of the entities is created.
    '''
    me = MaltegoTransform(argv)
    newEntities = []

    try:
        # Trying to recover pending entities if they exist.
        # If so, it means that it is NOT the first time that this info is recovered
        if str(me.getVar("@number_pending")) != "0" and me.getVar("@number_pending") != None:
            entitiesToShow = me.getVar("@pending")
            #print entitiesToShow
            newEntities = json.loads(entitiesToShow)        
            me.addListOfEntities(newEntities)            
        else:
            # We will try to expand the rest of the attributes
            for field in constants.I3VISIO_FIELDS:
                value =  me.getVar(field)
                #print field, value
                
                if value != None and value != " " and value != "":            
                    aux = {}
                    aux["type"] = field
                    aux["value"] =  value      
                    aux["attributes"] =  []
                    newEntities.append(aux)
    except:
        # In case of errors, we will try to expand the rest of the attributes
        for field in constants.I3VISIO_FIELDS:
            value =  me.getVar(field)
            #print field, value
            
            if value != None and value != " " and value != "":            
                aux = {}
                aux["type"] = field
                aux["value"] =  value      
                aux["attributes"] =  []
                newEntities.append(aux)
    me.addListOfEntities(newEntities)            
    # Returning the output text...
    me.returnOutput()
    
if __name__ == "__main__":
    expandPropertiesFromI3visioEntity(sys.argv)