more db stuff, log recon results to db

libs/brute.py

@@ -1,10 +1,22 @@
 import boto3
 import botocore
+import json
+import logging
 import pprint
 import sys
+import datetime #change as required once we decide time format
+
+from libs.sql import *
+
+
+# we chould probably load this from one place in the future #TODO
+db_name = "weirdAAL.db"
 
 pp = pprint.PrettyPrinter(indent=5, width=80)
 
+logging.basicConfig(level=logging.ERROR, format='%(message)s',filename='target.txt', filemode='w')
+
+
 #from http://docs.aws.amazon.com/general/latest/gr/rande.html
 regions = ['us-east-1', 'us-east-2', 'us-west-1', 'us-west-2', 'ca-central-1', 'eu-central-1', 'eu-west-1', 'eu-west-2', 'ap-northeast-1', 'ap-northeast-2', 'ap-southeast-1', 'ap-southeast-2',  ]
 
@@ -75,6 +87,24 @@ def generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, ser
     if actions:
         print ("\n[+] {} Actions allowed are [+]" .format(service))
         print (actions)
+        timenow = datetime.datetime.now()
+
+        db_logger = []
+        for action in actions:
+            db_logger.append([service, action, AWS_ACCESS_KEY_ID, timenow])
+        #print (db_logger)
+
+        #scrapped the json logging idea but keeping it here just in case
+        #data = json.dumps({'time' : timenow, 'service' : service, 'actions' : actions, 'target' : 'passed_in_target'})
+        #logging.critical(data)
+
+        #logging to db here
+        try:
+            insert_reconservice_data(db_name, db_logger)
+        except sqlite3.OperationalError as e:
+            print (e)
+            print ("You need to set up the database...exiting")
+            sys.exit()
         print ("\n")
     else:
         print ("\n[-] No {} actions allowed [-]" .format(service))

libs/sql.py

@@ -29,6 +29,7 @@ def create_recon_table(db_name, table_name):
              service text,
              sub_service text,
              AWSKeyID text,
+             checked_at text,
              PRIMARY KEY (ID))"""
              #FOREIGN KEY (AWSKeyID) references AWSKey(ID))"""
     create_table(db_name,table_name,sql)
@@ -50,14 +51,21 @@ def insert_awskey_data(db_name, records):
         query(db_name, sql,record)
 
 def insert_reconservice_data(db_name, records):
-    sql = """INSERT INTO recon(AWSKeyID, service, sub_service) VALUES (?,?,?)"""
+    sql = """INSERT INTO recon(service, sub_service, AWSKeyID, checked_at) VALUES (?,?,?,?)"""
     for record in records:
         query(db_name,sql,record)
 
+def search_recon_by_key(db_name,AWSKeyID):
+        with sqlite3.connect(db_name) as db:
+                cursor = db.cursor()
+                cursor.execute("""SELECT service,sub_service FROM recon WHERE AWSKeyID=?""",(AWSKeyID,))
+                results = cursor.fetchall()
+                return results
+
 def query(db_name,sql,data):
     with sqlite3.connect(db_name) as db:
         cursor = db.cursor()
-        cursor.execute("""PRAGMA foreign_keys = ON""")
+        #cursor.execute("""PRAGMA foreign_keys = ON""")
         cursor.execute(sql,data)
         db.commit()