Klez
/
IpGeo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update ipGeo.py

main
tired 2024-10-21 14:22:03 -05:00 committed by GitHub
parent 9af4c00cc7
commit 3edb33b9bf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 41 additions and 80 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

121
ipGeo.py
View File

@ -2,13 +2,12 @@ import pyshark
import requests
import json
import csv
import markdown # For generating markdown files
import argparse
from colorama import Fore
from datetime import date
import ipaddress
import argparse
def read_pcap(pcap_file):
def read_pcap(pcap_file, output_format):
ips = []
try:
pcap = pyshark.FileCapture(pcap_file)
@ -18,12 +17,13 @@ def read_pcap(pcap_file):
ips.append(packet.ip.src)
ips.append(packet["ip"].dst)
ips_list(ips)
ips_list(ips, output_format)
except FileNotFoundError:
exit(Fore.RED + '[!] Pcap path is incorrect')
def ips_list(ips):
def ips_list(ips, output_format):
ips_lists = []
aborted_ips = []
for ip in ips:
@ -31,106 +31,67 @@ def ips_list(ips):
ips_lists.append(ip)
elif ip not in aborted_ips and ipaddress.ip_address(ip).is_private:
aborted_ips.append(ip)
for ip in aborted_ips:
print(Fore.YELLOW + "[!] Remove " + Fore.RED + ip + Fore.YELLOW + ' From Scanning')
# Call get_ip_info function
if len(ips_lists) < 1:
exit(Fore.RED + "[-] No IP to scan.")
get_ip_info(ips_lists)
def get_ip_info(list_ip):
get_ip_info(ips_lists, output_format)
def get_ip_info(list_ip, output_format):
data = []
for ip in list_ip:
print(Fore.YELLOW + "[+] Start analyzing IP: " + ip)
print(Fore.YELLOW + "[+] Start analyzing IP : " + ip)
try:
req = requests.get(
f"http://ip-api.com/json/{ip}?fields=status,message,continent,continentCode,country,countryCode,region,regionName,city,district,zip,lat,lon,timezone,offset,currency,isp,org,as,asname,reverse,mobile,proxy,hosting,query"
)
# Check if the request was successful
if req.status_code == 200:
try:
# Attempt to parse the JSON response
ip_info = req.json()
if ip_info.get("status") == "success":
data.append(ip_info)
else:
print(Fore.RED + f"[!] Failed to get info for {ip}: {ip_info.get('message', 'Unknown error')}")
except json.JSONDecodeError:
print(Fore.RED + f"[!] Invalid JSON response for {ip}: {req.text}")
else:
print(Fore.RED + f"[!] Request failed for {ip}: {req.status_code} - {req.text}")
req = requests.get("http://ip-api.com/json/" + ip + "?fields=status,message,country,countryCode,region,regionName,city,district,zip,lat,lon,timezone,isp,org,as,asname,reverse,mobile,proxy,hosting,query").content.decode()
if "message" not in req:
data.append(req)
except requests.exceptions.ConnectionError:
exit(Fore.RED + "Check your internet connection and try again....")
exit(Fore.RED + "Check your internet connection and try again ....")
dic_data = []
for i in data:
l = json.loads(i)
dic_data.append(l)
export_result(dic_data, output_format)
if data:
export_result(data)
else:
exit(Fore.RED + "[-] No valid IP information retrieved.")
def export_result(data, output_format):
for i in data:
i['ip'] = i.pop('query')
i.pop('status', None) # Safely remove 'status' key if it exists
output_file = f'scan_result-{str(date.today())}.{output_format}'
# Modify this part to export in different formats
if output_format == 'json':
with open(output_file, 'w', encoding='UTF8') as f:
with open('scan_result-' + str(date.today()) + '.json', 'w', encoding='UTF8') as f:
json.dump(data, f, indent=4)
print(Fore.GREEN + f"\n** Report Exported Successfully to {output_file}! **")
elif output_format == 'csv':
with open(output_file, 'w', encoding='UTF8', newline='') as f:
writer = csv.DictWriter(f, fieldnames=data[0].keys())
fieldnames = data[0].keys()
with open('scan_result-' + str(date.today()) + '.csv', 'w', encoding='UTF8', newline='') as f:
writer = csv.DictWriter(f, fieldnames=fieldnames)
writer.writeheader()
writer.writerows(data)
print(Fore.GREEN + f"\n** Report Exported Successfully to {output_file}! **")
elif output_format == 'txt':
with open(output_file, 'w', encoding='UTF8') as f:
for entry in data:
f.write(json.dumps(entry) + "\n")
print(Fore.GREEN + f"\n** Report Exported Successfully to {output_file}! **")
with open('scan_result-' + str(date.today()) + '.txt', 'w', encoding='UTF8') as f:
for item in data:
f.write(f"{item}\n")
elif output_format == 'md':
with open(output_file, 'w', encoding='UTF8') as f:
f.write("# IP Analysis Report\n\n")
for entry in data:
f.write(f"## IP: {entry['ip']}\n")
for key, value in entry.items():
if key != 'ip':
f.write(f"- **{key}**: {value}\n")
f.write("\n")
print(Fore.GREEN + f"\n** Report Exported Successfully to {output_file}! **")
with open('scan_result-' + str(date.today()) + '.md', 'w', encoding='UTF8') as f:
for item in data:
f.write(f"| {' | '.join(f'{key}: {value}' for key, value in item.items())} |\n")
print(Fore.GREEN + "\n **Report Exported Successfully!**")
else:
print(Fore.RED + "[-] Unsupported format. Please use json, csv, txt, or md.")
def main():
# Setup argument parser
parser = argparse.ArgumentParser(description='Analyze IP addresses from a pcap file.')
parser.add_argument('pcap_file', nargs='?', help='Path to the pcap file (optional, will prompt if not provided)')
parser.add_argument('--format', choices=['json', 'csv', 'txt', 'md'], default=None,
help='Output format (default: will prompt if not provided)')
parser = argparse.ArgumentParser(description='Extract IP addresses from pcap files and geolocate them.')
parser.add_argument('pcap', help='Path to the pcap file.')
parser.add_argument('--format', choices=['json', 'csv', 'txt', 'md'], default='json', help='Output format (default: json).')
# Parse the arguments
args = parser.parse_args()
# Check if pcap_file was provided, if not, prompt the user
if args.pcap_file:
pcap_path = args.pcap_file
else:
pcap_path = input("[-] Enter pcap file: ")
# Check output format
if args.format:
output_format = args.format
else:
output_format = input("[-] Enter output format (json, csv, txt, md): ").strip().lower()
while output_format not in ['json', 'csv', 'txt', 'md']:
output_format = input("[-] Invalid format. Please enter json, csv, txt, or md: ").strip().lower()
read_pcap(pcap_path)
read_pcap(args.pcap, args.format)
if __name__ == "__main__":
main()