aslgit.py

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# File name          : aslgit.py
# Author             : BlueCtx (AnonSecLab)
# Date created       : 21 Aug 2022

from email.mime import base
import json
import requests
import binascii
import re
from requests.auth import HTTPBasicAuth
import sys
import base64
import argparse
import shutil
import webbrowser

version_number = '1.0.4'

def get_banner():
    """Génère le banner adapté à la taille du terminal"""
    try:
        terminal_width = shutil.get_terminal_size().columns
    except:
        terminal_width = 80
    
    banner_full = f"""\x1b[0;33m
    .aMMMb  dMMMMb  .aMMMb  dMMMMb  .dMMMb  dMMMMMP .aMMMb  dMP     .aMMMb  dMMMMb 
   dMP"dMP dMP dMP dMP"dMP dMP dMP dMP" VP dMP     dMP"VMP dMP     dMP"dMP dMP"dMP 
  dMMMMMP dMP dMP dMP dMP dMP dMP  VMMMb  dMMMP   dMP     dMP     dMMMMMP dMMMMK"  
 dMP dMP dMP dMP dMP.aMP dMP dMP dP .dMP dMP     dMP.aMP dMP     dMP dMP dMP.aMF   
dMP dMP dMP dMP  VMMMP" dMP dMP  VMMMP" dMMMMMP  VMMMP" dMMMMMP dMP dMP dMMMMP"    
                                                                                   \x1b[1;33mv{version_number}\x1b[0;33m
\x1b[0;1;3mBy BlueCtx\x1b[0;33m | \x1b[0;1mhttps://bluectx.github.io\x1b[0m | \x1b[0;1mhttps://anonseclab.org\x1b[0m
\x1b[0;36mcontact@anonseclab.org\x1b[0m
"""
    
    banner_medium = f"""\x1b[0;33m
 .aMMMb  dMMMMb  .aMMMb  dMMMMb  .dMMMb  dMMMMMP .aMMMb  dMP
dMP"dMP dMP dMP dMP"dMP dMP dMP dMP" VP dMP     dMP"VMP dMP
dMMMMMP dMP dMP dMP dMP dMP dMP  VMMMb  dMMMP   dMP     dMP
dMP dMP dMP dMP dMP.aMP dMP dMP dP .dMP dMP     dMP.aMP dMP
dMP dMP dMP dMP  VMMMP" dMP dMP  VMMMP" dMMMMMP  VMMMP" dMMMMMP
                                    \x1b[1;33mv{version_number}\x1b[0;33m
\x1b[0;1;3mBy BlueCtx\x1b[0;33m | \x1b[0;1mhttps://bluectx.github.io\x1b[0m
\x1b[0;36mcontact@anonseclab.org\x1b[0m
"""
    
    banner_compact = f"""\x1b[0;33m
 .aMMMb  dMMMMb  .aMMMb  dMMMMb
dMP"dMP dMP dMP dMP"dMP dMP dMP
dMMMMMP dMP dMP dMP dMP dMP dMP
dMP dMP dMP dMP dMP.aMP dMP dMP
dMP dMP dMP dMP  VMMMP" dMP dMP
            \x1b[1;33mv{version_number}\x1b[0;33m
\x1b[0;1;3mBlueCtx\x1b[0;33m | \x1b[0;1mbluectx.github.io\x1b[0m
\x1b[0;36mcontact@anonseclab.org\x1b[0m
"""
    
    if terminal_width >= 100:
        return banner_full
    elif terminal_width >= 70:
        return banner_medium
    else:
        return banner_compact

jsonOutput = {}
output = []
email_out = []

def findReposFromUsername(username):
    response = requests.get('https://api.github.com/users/%s/repos?per_page=100&sort=pushed' % username).text
    repos = re.findall(r'"full_name":"%s/(.*?)",.*?"fork":(.*?),' % username, response)
    nonForkedRepos = []
    for repo in repos:
        if repo[1] == 'false':
            nonForkedRepos.append(repo[0])
    return nonForkedRepos


def findEmailFromContributor(username, repo, contributor):
    response = requests.get('https://github.com/%s/%s/commits?author=%s' % (username, repo, contributor), auth=HTTPBasicAuth(username, '')).text
    latestCommit = re.search(r'href="/%s/%s/commit/(.*?)"' % (username, repo), response)
    if latestCommit:
        latestCommit = latestCommit.group(1)
    else:
        latestCommit = 'dummy'
    commitDetails = requests.get('https://github.com/%s/%s/commit/%s.patch' % (username, repo, latestCommit), auth=HTTPBasicAuth(username, '')).text
    email = re.search(r'<(.*)>', commitDetails)
    if email:
        email = email.group(1)
        email_out.append(email)
    return

def findEmailFromUsername(username):
	repos = findReposFromUsername(username)
	for repo in repos:
		findEmailFromContributor(username, repo, username)

def findPublicKeysFromUsername(username):
    gpg_response = requests.get(f'https://github.com/{username}.gpg').text
    ssh_response = requests.get(f'https://github.com/{username}.keys').text
    if not "hasn't uploaded any GPG keys" in gpg_response:
        output.append(f'[+] GPG_keys : https://github.com/{username}.gpg')
        jsonOutput['GPG_keys'] = f'https://github.com/{username}.gpg'
        # extract email from gpg key
        regex_pgp = re.compile(r"-----BEGIN [^-]+-----([A-Za-z0-9+\/=\s]+)-----END [^-]+-----", re.MULTILINE)
        matches = regex_pgp.findall(gpg_response)
        if matches:
            # Base64 decode the signature block
            b64 = base64.b64decode(matches[0])
            # Convert the base64 to hex
            hx = binascii.hexlify(b64)
            # Get the offsets for the Key ID
            keyid = hx.decode()[48:64]
            output.append(f'[+] GPG_key_id : {keyid}')
            jsonOutput['GPG_key_id'] = keyid
            # find email adress
            emails = re.findall(r"[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+", b64.decode('Latin-1'))
            if emails:
                for email in emails:
                    email_out.append(email)
    if ssh_response :
        output.append(f'[+] SSH_keys : https:/github.com/{username}.keys')
        jsonOutput['SSH_keys'] = f'https://github.com/{username}.keys'

def findInfoFromUsername(username):
    url = f'https://api.github.com/users/{username}'
    response = requests.get(url)
    if response.status_code == 200 and requests.codes.ok:
        data = response.json()
        for i in data:
            if i in ['login','id','avatar_url','name','blog','location','twitter_username','email','company','bio','public_gists','public_repos','followers','following','created_at','updated_at']:
                if data[i] != None and data[i] != '':
                    if i == 'email':
                        email_out.append(data[i])
                    jsonOutput[i] = data[i]
                    output.append(f'[+] {i} : {data[i]}')
        jsonOutput['public_gists'] = f'https://gist.github.com/{username}'
        output.append(f'[+] public_gists : https://gist.github.com/{username}')
        return True
    elif response.status_code == 404:
        jsonOutput['error'] = 'username does not exist'
        return False

def findUsernameFromEmail(email):
    response = requests.get('https://api.github.com/search/users?q=%s' % email).text
    username = re.findall(r'"login":"(.*?)"', response)
    if username:
        output.append(f'[+] username : {username[0]}')
        jsonOutput['username'] = username[0]
    else:
        output.append(f'[-] username : Not found')
        jsonOutput['username'] = 'Not found'

class CustomParser(argparse.ArgumentParser):
    def error(self, message):
        sys.stderr.write('Error: %s\n' % message)
        self.print_help()
        sys.exit(2)

def parse_args():
    parser = argparse.ArgumentParser(
        prog=sys.argv[0],
        formatter_class=argparse.ArgumentDefaultsHelpFormatter
    )
    parser.add_argument("-u", "--username", default=None, help="Github username of the account to search for")
    parser.add_argument("-e", "--email", default=None, help="Email of the account to search for github username")
    parser.add_argument("--json", default=False, action="store_true", help="Return a json output")
    args = parser.parse_args()

    return args


if __name__ == '__main__':
    print(get_banner())
    args = parse_args()
    if(args.username):
        username_exists = findInfoFromUsername(args.username)
        if username_exists:
            findEmailFromUsername(args.username)
            findPublicKeysFromUsername(args.username)
            if(args.json):
                jsonOutput['email'] = list(set(email_out))
                print(json.dumps(jsonOutput, sort_keys=True, indent=4))
            else:
                for data in output:
                    print(data)
                if email_out != []:
                    print('[+] email :', end='')
                    for email in list(set(email_out)):
                        print(f' {email}', end='')
        else:
            if(args.json):
                print(json.dumps(jsonOutput, sort_keys=True, indent=4))
            else:
                print(f'Username does not exist')
    elif(args.email):
        findUsernameFromEmail(args.email)
        if(args.json):
            print(json.dumps(jsonOutput, sort_keys=True, indent=4))
        else:
            for data in output:
                print(data)
    else:
        print('Help: ./aslgit -h')
        sys.exit(1)