Fofa-dump

fofa快速获取的小工具

简介

因为fofa禁用了before+after的联合查询，但是仍然允许单个参数查询，所以该工具是只针对before这一条过滤的高效工具
需要高级会员, 某宝10块一个月, 只变动query其他不影响

核心算法

二分法确定下一个before

while left < right:
    mid = (left + right) // 2

    query = '{query} && before="{before}"'.format(query=self.query, before=decrease(timestamp_before, mid))
    result = self.my_fofa(query, size=1)
    if result is not None:
        next_size = int(result['size'])
        diff = last_size - next_size
        # print(diff)
        if diff == target:
            right = mid
        elif diff < target:
            left = mid + 1
        elif diff > target:
            right = mid

优化：该程序二分法的初始跨度为365天, 程序会根据每次最终确定的天数动态调整二分法的边界，固定为两次查询before时间差距的二倍

# 上一次查询的before的时间戳
last_timestamp_before = timestamp_before
# 本次查询的before的时间戳
timestamp_before = time_format_to_timestamp(decrease(timestamp_before, left))
# 二者的差值的二倍设置为右边界
# 寻找差值最接近1w的下一个before的时间, 使用二分法, right为上次查找和本次查找时间差值的二倍 (稍微智能一些)
o_right = diff_timestamp(last_timestamp_before, timestamp_before) * 2

测试

wspx少量

用友(中量)

log4j2(大量)