[Request] zoomeye.org

[zero77]

Can you please add support for https://www.zoomeye.org/ alongside Shodan.io.
Thanks

[Ekultek]

Depends on what the significance of that site is? We're working on implementing Censys.io already

[zero77]

It generally seems to have quite a lot of results and gives users less restrictions than Shodan.

[Ekultek]

What’s the difference between it and Censys?

[zero77]

There seem to be more results in zoomeye than censys, its like google vs yahoo vs duckduckgo each returns different results.

For example, when you search ssh zoomeye has 66,062,549 results and censys has 10,828,406 results.

[Ekultek]

@NullArray whatcha think?

[kimocoder]

It should be a good solution to search within all of them, with an option on which one to use of them.

[Ekultek]

@kimocoder that’s a lot of requesting though and a lot of potential error handling

[Ekultek]

I think it’s a pretty decent idea though. And the API looks pretty friendly https://www.zoomeye.org/api

[kimocoder]

Sure would be. May out it on the TODO list for later, handling all those different API's sure would bring some work.

[Ekultek]

Connecting to the API and writing the code for them isn’t the problem. The error handling will be the issue because every API allows a certain amount at a time. So depending on what their limit is and how the connection works, it could be an issue. Other then that, the coding part is easy.

…

On Feb 22, 2018, at 11:54 AM, Christian B. ***@***.***> wrote: Sure would be. May out it on the TODO list for later, handling all those different API's sure would bring some work. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[NullArray]

I think it's a good idea to add Zoomeye. The more hosts we can gather the better. Getting AutoSploit set up to support this shouldn't be hard at all.

So the documentation gives this as an example with the curl utility.

curl -X GET 'https://api.zoomeye.org/host/search?query=port:21%20city:beijing&page=1&facet=app,os' \
-H "Authorization: JWT eyJhbGciOiJIUzI1NiIsInR5..."

We can work it in much the same way by using the PycURL library and StringIO. We could even parse the results as JSON in much the same way i did in my Mimir tool.

The benefit of parsing the results as JSON would be the fact that by doing so we can pass the host list as a dict to the msfrpc service.