69d58eede2
related functionality
38 lines
1.7 KiB
Python
38 lines
1.7 KiB
Python
#--require-config virustotal-api-key
|
|
|
|
import re
|
|
from src import ModuleManager, utils
|
|
|
|
URL_VIRUSTOTAL = "https://www.virustotal.com/vtapi/v2/url/report"
|
|
RE_URL = re.compile(r"https?://\S+", re.I)
|
|
|
|
@utils.export("channelset", {"setting": "check-urls",
|
|
"help": "Enable/Disable automatically checking for malicious URLs",
|
|
"validate": utils.bool_or_none})
|
|
@utils.export("serverset", {"setting": "check-urls",
|
|
"help": "Enable/Disable automatically checking for malicious URLs",
|
|
"validate": utils.bool_or_none})
|
|
@utils.export("channelset", {"setting": "check-urls-kick",
|
|
"help": "Enable/Disable automatically kicking users that "
|
|
"send malicious URLs", "validate": utils.bool_or_none})
|
|
class Module(ModuleManager.BaseModule):
|
|
@utils.hook("received.message.channel")
|
|
def message(self, event):
|
|
match = RE_URL.search(event["message"])
|
|
if match and event["channel"].get_setting("check-urls",
|
|
event["server"].get_setting("check-urls", False)):
|
|
url = match.group(0)
|
|
page = utils.http.get_url(URL_VIRUSTOTAL, get_params={
|
|
"apikey": self.bot.config["virustotal-api-key"],
|
|
"resource": url}, json=True)
|
|
|
|
if page and page.get("positives", 0) > 1:
|
|
if event["channel"].get_setting("check-urls-kick", False):
|
|
event["channel"].send_kick(event["user"].nickname,
|
|
"Don't send malicious URLs!")
|
|
else:
|
|
self.events.on("send.stdout").call(
|
|
module_name="CheckURL", target=event["channel"],
|
|
message="%s just send a malicous URL!" %
|
|
event["user"].nickname)
|
|
|