welsonjs/examples/virustotal.js

119 lines
4.7 KiB
JavaScript

// virustotal.js
// Namhyeon Go <abuse@catswords.net>
var FILE = require("lib/file");
var HTTP = require("lib/http");
var Chrome = require("lib/chrome");
var RAND = require("lib/rand");
function getHashes() {
var rows = [];
var lines = splitLn(FILE.readFile("data\\hashes.txt", FILE.CdoCharset.CdoUTF_8));
for (var i = 0; i < lines.length; i++) {
var row = lines[i].split(',');
if (row.length == 2) rows.push(row);
if (row.length == 1) rows.push(['', row[0]]);
}
return rows;
}
function main(args) {
var hashes = getHashes();
var lines = [];
var wbInstance = Chrome.startWithDebugging("https://virustotal.com", null, "virustotal", 9222);
// 대기
sleep(5000);
// 브라우저 탭 찾기
pages = wbInstance.getPagesByTitle("VirusTotal");
if (pages.length > 0) {
page = pages[0];
wbInstance.setPageId(page.id);
wbInstance.autoAdjustByWindow(1920, 1080, 1050, 1200, 800, 950);
}
var callback1 = function(row) {
var hash = row[1];
console.log("탐색을 시도합니다:", hash);
wbInstance.navigate("https://www.virustotal.com/gui/file/" + hash);
sleep(RAND.getInt(4000, 5000));
// 자료를 찾았는지 여부
var msgNotFound = wbInstance.getEvaluatedValue(
"__getDocument().querySelector('vt-ui-shell').shadowRoot.querySelector('#mainContent').querySelector('slot').assignedNodes()[2]" +
wbInstance.getShadowRootSelector([
"search-view",
"vt-ui-special-states"
]) +
".shadowRoot.querySelector('.title slot').assignedNodes()[0].innerText"
);
if (msgNotFound == "No matches found") {
console.log("찾을 수 없음 (No matches found): " + hash);
lines.push([hash, '', '0', '0', '0', ''].join(','));
return;
}
// 전체 진단 수 확인
var positives = wbInstance.getEvaluatedValue(
"__getDocument().querySelector('vt-ui-shell').shadowRoot.querySelector('#mainContent').querySelector('slot').assignedNodes()[2]" +
wbInstance.getShadowRootSelector([
"file-view",
"vt-ui-main-generic-report",
"vt-ui-detections-widget"
]) +
".shadowRoot.querySelector('div > div > div.positives').innerText"
);
// 알려진 파일 명
var filename = wbInstance.getEvaluatedValue(
"__getDocument().querySelector('vt-ui-shell').shadowRoot.querySelector('#mainContent').querySelector('slot').assignedNodes()[2]" +
wbInstance.getShadowRootSelector([
"file-view",
"vt-ui-file-card"
]) +
".shadowRoot.querySelector('div > div.card-body > div > div.hstack.gap-4 > div.vstack.gap-2.align-self-center.text-truncate > div.file-name.text-truncate > a').innerText"
);
// 최근 진단 날짜 확인
var last = wbInstance.getEvaluatedValue(
"__getDocument().querySelector('vt-ui-shell').shadowRoot.querySelector('#mainContent').querySelector('slot').assignedNodes()[2]" +
wbInstance.getShadowRootSelector([
"file-view",
"vt-ui-file-card"
]) +
".shadowRoot.querySelector('div > div.card-body > div > div.hstack.gap-4 > div:nth-child(5) > vt-ui-time-ago').getAttribute('data-tooltip-text')"
);
// 국내 백신 진단 여부 확인
var score_undetected = wbInstance.getEvaluatedValue(
'Object.values(' +
"__getDocument().querySelector('vt-ui-shell').shadowRoot.querySelector('#mainContent').querySelector('slot').assignedNodes()[2].querySelector('file-view').shadowRoot.querySelector('vt-ui-main-generic-report').querySelector('.tab-slot')" +
wbInstance.getShadowRootSelector([
"vt-ui-detections-list",
"vt-ui-expandable"
]) +
".querySelectorAll('.detection')).reduce(function(a, x) { if(/AhnLab|ALYac|ViRobot/.test(x.innerText) && x.innerText.indexOf('Undetected') > -1) a = a + 1; return a; }, 0)"
);
console.log("해시:", hash);
console.log("알려진 파일 이름:", filename);
console.log("전체 진단:", positives);
console.log("최근 날짜:", last);
console.log("국내 백신 미진단:", score_undetected + "건");
// 쓰기 줄 생성
lines.push([hash, filename, '1', positives, score_undetected, last].join(','));
};
hashes.forEach(callback1);
FILE.appendFile("data\\vt_matches_2.txt", lines.join("\r\n"), FILE.CdoCharset.CdoUTF_8);
}
exports.main = main;