7 | 
8 | 
10 | 134 | 135 | ### CVE Enrichment 136 |
137 | 138 | 139 | ### GHSA Enrichment 140 |
141 | 142 | 143 | ## Noteworthy Mentions 144 | 145 | - [Passive Subdomain Enumeration: Uncovering More Subdomains than Subfinder & Amass](https://osintteam.com/passive-subdomain-enumeration-uncovering-more-subdomains-than-subfinder-amass/) 146 | - [Around 1000 exploitable cybersecurity vulnerabilities that MITRE & NIST ‘might’ have missed but China or Russia didn’t.](https://blog.arpsyndicate.io/over-a-1000-vulnerabilities-that-mitre-nist-might-have-missed-but-china-or-russia-did-not-871b2364a526) 147 | - [Utilizing GitHub Actions for gathering Subdomain & Exploit Intelligence](https://blog.arpsyndicate.io/utilizing-github-actions-for-gathering-subdomain-exploit-intelligence-bbc79c19bb85) 148 | - [Introducing Exploit Observer — More than Shodan Exploits, Less than Vulners](https://blog.arpsyndicate.io/introducing-exploit-observer-more-than-shodan-exploits-less-than-vulners-23eaea466e4a) 149 | - [PUNCIA — The Panthera(P.)uncia of Cybersecurity](https://blog.arpsyndicate.io/puncia-the-panthera-p-uncia-of-cybersecurity-ft-puncia-subdomain-center-exploit-observer-9a9d8cca9576) 150 | - [Subdomain Enumeration Tool Face-off - 2023 Edition](https://blog.blacklanternsecurity.com/p/subdomain-enumeration-tool-face-off-4e5) 151 | 152 | ## More from [A.R.P. Syndicate](https://www.arpsyndicate.io) 153 | 154 | - [VEDAS Advisories](https://vedas.arpsyndicate.io) 155 | - [CTI Grid](https://ctigrid.arpsyndicate.io) 156 | - [Open Source Intelligence](https://asm.arpsyndicate.io/intelligence.html) 157 | - [Attack Surface Management](https://asm.arpsyndicate.io) 158 | -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- 1 | ### Security Policy 2 | 3 | A.R.P. Syndicate takes security seriously and is committed to ensuring the safety and privacy of its users' data. If you discover any security vulnerabilities or have concerns about the security of our application, please follow the guidelines below to report them responsibly. 4 | 5 | #### Reporting a Vulnerability 6 | 7 | To report a security vulnerability, please navigate to the **[Security](https://github.com/ARPSyndicate/puncia/security)** tab and follow the instructions to report a vulnerability. 8 | 9 | When reporting a vulnerability, please include as much information as possible to help us understand and resolve the issue quickly. Ideally, your report should contain: 10 | 11 | - A detailed description of the vulnerability. 12 | - Steps to reproduce the issue. 13 | - Any relevant information, such as screenshots or logs. 14 | 15 | #### Response Time 16 | 17 | We will acknowledge receipt of your report within 48 hours and provide an initial assessment of the report within 5 business days. Our team will keep you informed about the progress and any actions we take as a result of your report. 18 | 19 | #### Disclosure Policy 20 | 21 | We follow a responsible disclosure policy to protect our users while we work on resolving any reported vulnerabilities. We kindly request that you: 22 | 23 | - Allow us a reasonable amount of time to investigate and address your report before any public disclosure. 24 | - Avoid exploiting the vulnerability or sharing it with others before it is resolved. 25 | 26 | #### Contact 27 | 28 | For any security-related questions or concerns, please feel free to reach out at [ayush@arpsyndicate.io]. 29 | 30 | Thank you for helping us keep our application secure! 31 | 32 | --- 33 | 34 | By adhering to this Security Policy, you help us maintain a safe and secure environment for all users. We appreciate your cooperation and responsible disclosure practices. 35 | 36 | --- -------------------------------------------------------------------------------- /cve-enrich-diff.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ARPSyndicate/puncia/5e784c63efc17a47bc81f87d6d14611f24fb95b6/cve-enrich-diff.png -------------------------------------------------------------------------------- /ghsa-enrich-diff.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ARPSyndicate/puncia/5e784c63efc17a47bc81f87d6d14611f24fb95b6/ghsa-enrich-diff.png -------------------------------------------------------------------------------- /puncia-actions.yml: -------------------------------------------------------------------------------- 1 | name: puncia-actions 2 | 3 | on: 4 | schedule: 5 | - cron: '0 0 * * *' 6 | push: 7 | branches: 8 | - main 9 | pull_request: 10 | branches: 11 | - main 12 | 13 | jobs: 14 | puncia: 15 | runs-on: ubuntu-latest 16 | steps: 17 | - uses: actions/checkout@v2 18 | - name: Set up Python 19 | uses: actions/setup-python@v2 20 | with: 21 | python-version: '3.9' 22 | 23 | - name: Install Puncia 24 | run: | 25 | pip3 install puncia 26 | 27 | - name: Run Puncia 28 | run: | 29 | puncia bulk ${{ github.workspace }}/inputs.json ${{ github.workspace }}/ 30 | 31 | - name: Commit and push changes 32 | run: | 33 | git config --local user.email "puncia@github.local" 34 | git config --local user.name "Puncia Actions" 35 | git add . 36 | git commit -m "$(date)" 37 | git push -------------------------------------------------------------------------------- /puncia.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ARPSyndicate/puncia/5e784c63efc17a47bc81f87d6d14611f24fb95b6/puncia.png -------------------------------------------------------------------------------- /puncia/__init__.py: -------------------------------------------------------------------------------- 1 | from .__main__ import query_api, store_key, read_key 2 | 3 | __all__ = ["query_api", "store_key", "read_key"] -------------------------------------------------------------------------------- /puncia/__main__.py: -------------------------------------------------------------------------------- 1 | import os 2 | import sys 3 | import json 4 | import asyncio 5 | import aiohttp 6 | from aiofiles import open as aio_open 7 | 8 | 9 | API_URLS = { 10 | "subdomain": "https://api.subdomain.center/?domain=", 11 | "replica": "https://api.subdomain.center/?engine=octopus&domain=", 12 | "exploit": "https://api.exploit.observer/?keyword=", 13 | "enrich": "https://api.exploit.observer/?enrich=True&keyword=", 14 | "chat": "https://api.osprey.vision/", 15 | "auth_subdomain": "https://api.subdomain.center/beta/?auth={0}&domain=", 16 | "auth_replica": "https://api.subdomain.center/beta/?auth={0}&engine=octopus&domain=", 17 | "auth_exploit": "https://api.exploit.observer/beta/?auth={0}&keyword=", 18 | "auth_enrich": "https://api.exploit.observer/beta/?auth={0}&enrich=True&keyword=", 19 | "auth_chat": "https://api.osprey.vision/beta/", 20 | "auth_summarize": "https://api.osprey.vision/summarize/", 21 | "auth_advisory": "https://api.osprey.vision/advisory/", 22 | "russia": "https://api.exploit.observer/russia/", 23 | "europe": "https://api.exploit.observer/europe/", 24 | "china": "https://api.exploit.observer/china/", 25 | "watchlist_ides": "https://api.exploit.observer/watchlist/identifiers", 26 | "watchlist_info": "https://api.exploit.observer/watchlist/describers", 27 | "watchlist_tech": "https://api.exploit.observer/watchlist/technologies", 28 | } 29 | 30 | 31 | async def store_key(key=""): 32 | home = os.path.expanduser("~") 33 | async with aio_open(home + "/.puncia", "w") as f: 34 | await f.write(key) 35 | 36 | 37 | async def read_key(): 38 | try: 39 | home = os.path.expanduser("~") 40 | async with aio_open(home + "/.puncia", "r") as f: 41 | return (await f.read()).strip() 42 | except FileNotFoundError: 43 | return "" 44 | 45 | 46 | async def query_api(mode, query, output_file=None, cid=None, apikey=""): 47 | async with aiohttp.ClientSession() as session: 48 | if len(apikey) > 0 and mode in [ 49 | "exploit", 50 | "subdomain", 51 | "enrich", 52 | "replica", 53 | "chat", 54 | "summarize", 55 | "advisory", 56 | ]: 57 | url = API_URLS.get("auth_" + mode).format(apikey) 58 | else: 59 | await asyncio.sleep(5) 60 | url = API_URLS.get(mode) 61 | if not url: 62 | print("Invalid Mode / Missing Authentication") 63 | return 64 | 65 | if "^" in query and "exploit" in mode: 66 | if query == "^EU_NON_CVE": 67 | url = API_URLS.get("europe") 68 | query = "noncve" 69 | mode = "spec_exploit" 70 | cid = "European VIDs with no associated CVEs" 71 | elif query == "^RU_NON_CVE": 72 | url = API_URLS.get("russia") 73 | query = "noncve" 74 | mode = "spec_exploit" 75 | cid = "Russian VIDs with no associated CVEs" 76 | elif query == "^CN_NON_CVE": 77 | url = API_URLS.get("china") 78 | query = "noncve" 79 | mode = "spec_exploit" 80 | cid = "Chinese VIDs with no associated CVEs" 81 | elif query == "^WATCHLIST_IDES": 82 | url = API_URLS.get("watchlist_ides") 83 | query = "" 84 | mode = "spec_exploit" 85 | cid = "Vulnerability & Exploit Watchlist" 86 | elif query == "^WATCHLIST_INFO": 87 | url = API_URLS.get("watchlist_info") 88 | query = "" 89 | mode = "spec_exploit" 90 | cid = "Vulnerability & Exploit Watchlist (with descriptions)" 91 | elif query == "^WATCHLIST_TECH": 92 | url = API_URLS.get("watchlist_tech") 93 | query = "" 94 | mode = "spec_exploit" 95 | cid = "Vulnerable Technologies Watchlist" 96 | 97 | retries = 1 98 | counter = 0 99 | response_data = None 100 | 101 | while counter <= retries: 102 | try: 103 | if mode in ["chat", "auth_chat"]: 104 | reschat = "" 105 | data = {"prompt": query} 106 | if "/beta" in url: 107 | data["auth"] = apikey 108 | async with session.post(url, json=data) as response: 109 | async for line in response.content: 110 | if sys.argv[0].endswith("puncia"): 111 | print(line.decode("utf-8"), flush=True, end="") 112 | reschat += line.decode("utf-8") 113 | if sys.argv[0].endswith("puncia"): 114 | print("\n") 115 | if output_file: 116 | with open(output_file, "w") as f: 117 | f.write(reschat) 118 | counter = counter + 1 119 | if reschat and len(reschat) > 1: 120 | return reschat 121 | 122 | elif mode in ["summarize", "auth_summarize"]: 123 | reschat = "" 124 | data = {"links": query} 125 | data["auth"] = apikey 126 | async with session.post(url, json=data) as response: 127 | async for line in response.content: 128 | if sys.argv[0].endswith("puncia"): 129 | print(line.decode("utf-8"), flush=True, end="") 130 | reschat += line.decode("utf-8") 131 | if sys.argv[0].endswith("puncia"): 132 | print("\n") 133 | if output_file: 134 | with open(output_file, "w") as f: 135 | f.write(reschat) 136 | counter = counter + 1 137 | if reschat and len(reschat) > 1: 138 | return reschat 139 | elif mode in ["advisory", "auth_advisory"]: 140 | reschat = "" 141 | if len(query.split("|")) == 2: 142 | data = {"vulnid": query.split("|")[0], "lang": query.split("|")[1].upper()} 143 | else: 144 | data = {"vulnid": query, "lang": "ENGLISH"} 145 | data["auth"] = apikey 146 | async with session.post(url, json=data) as response: 147 | async for line in response.content: 148 | if sys.argv[0].endswith("puncia"): 149 | print(line.decode("utf-8"), flush=True, end="") 150 | reschat += line.decode("utf-8") 151 | if sys.argv[0].endswith("puncia"): 152 | print("\n") 153 | if output_file: 154 | with open(output_file, "w") as f: 155 | f.write(reschat) 156 | counter = counter + 1 157 | if reschat and len(reschat) > 1: 158 | return reschat 159 | else: 160 | async with session.get(url + query) as response: 161 | response_data = await response.json() 162 | 163 | if response_data: 164 | if len(response_data) > 1: 165 | break 166 | except Exception as ne: 167 | exc_type, exc_value, exc_tb = sys.exc_info() 168 | line_number = exc_tb.tb_lineno 169 | print(f"Error: {str(ne)} at line {line_number}") 170 | counter += 1 171 | await asyncio.sleep(2) 172 | 173 | if response_data and mode == "spec_exploit" and output_file: 174 | try: 175 | async with aio_open(output_file, "w") as f: 176 | await f.write(json.dumps(response_data, indent=4, sort_keys=True)) 177 | except Exception as ne: 178 | exc_type, exc_value, exc_tb = sys.exc_info() 179 | line_number = exc_tb.tb_lineno 180 | print(f"Error: {str(ne)} at line {line_number}") 181 | return response_data 182 | 183 | if response_data and output_file: 184 | async with aio_open(output_file, "w") as f: 185 | await f.write(json.dumps(response_data, indent=4, sort_keys=True)) 186 | 187 | return response_data 188 | 189 | 190 | def sbom_process(sbom): 191 | fingps = [] 192 | 193 | def add_component(name, version): 194 | if name and version: 195 | fingps.append(f"{name}@{version}") 196 | 197 | metadata_component = sbom.get("metadata", {}).get("component", {}) 198 | add_component(metadata_component.get("name"), metadata_component.get("version")) 199 | components = sbom.get("components", []) 200 | for subcom in components: 201 | add_component(subcom.get("name"), subcom.get("version")) 202 | return fingps 203 | 204 | 205 | async def process_bulk(input_file, output_directory, apikey): 206 | tasks = [] 207 | for mode, queries in input_file.items(): 208 | for query in queries: 209 | output_file = f"{output_directory}/{mode}/{query}.json" 210 | os.makedirs(os.path.dirname(output_file), exist_ok=True) 211 | tasks.append(query_api(mode, query, output_file, apikey=apikey)) 212 | await asyncio.gather(*tasks) 213 | 214 | 215 | async def main(): 216 | try: 217 | if len(sys.argv) < 3: 218 | print("---------") 219 | print("Panthera(P.)uncia [v0.33]") 220 | print("A.R.P. Syndicate [https://www.arpsyndicate.io]") 221 | print("---------") 222 | sys.exit( 223 | "usage: puncia