Mirrors/GHunt
1
0
Fork 0
mirror of https://github.com/mxrch/GHunt.git synced 2025-12-22 05:47:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #384 from ahmadhany/bug/hangouts-issue

Browse Source 
Switching from hangouts to chat
This commit is contained in:
mxrch
2022-11-23 21:43:35 +01:00
committed by GitHub
parent 4f8031d6a1 ce2b9ff06c
commit 5a20e78198
4 changed files with 60 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.gitignore vendored
View File

@@ -8,4 +8,6 @@ chromedriver.exe
data.txt
login.py
.DS_Store
debug.log
debug.log
*.env
.vscode

86
check_and_gen.py
View File

@@ -40,26 +40,21 @@ def get_saved_cookies():
return False
def get_authorization_source(cookies):
''' Returns html source of hangouts page
def get_authorization_source(driver):
''' Returns html source of docs page
if user authorized
'''
req = httpx.get("https://docs.google.com/document/u/0/?usp=direct_url",
cookies=cookies, headers=config.headers)
if req.status_code == 200:
req2 = httpx.get("https://hangouts.google.com", cookies=cookies,
headers=config.headers)
if "myaccount.google.com" in req2.text:
return req.text
driver.get('https://docs.google.com/document/u/0/')
if "myaccount.google.com" in driver.page_source:
return driver.page_source
return None
def save_tokens(gdoc_token, hangouts_auth, hangouts_token, internal_token, internal_auth, cac_key, cookies, osid):
def save_tokens(gdoc_token, chat_key, chat_auth, internal_token, internal_auth, cac_key, cookies, osid):
'''Ssave tokens to file '''
output = {
"hangouts_auth": hangouts_auth, "internal_auth": internal_auth,
"keys": {"gdoc": gdoc_token, "hangouts": hangouts_token, "internal": internal_token, "clientauthconfig": cac_key},
"chat_auth": chat_auth, "internal_auth": internal_auth,
"keys": {"gdoc": gdoc_token, "chat": chat_key, "internal": internal_token, "clientauthconfig": cac_key},
"cookies": cookies,
"osids": {
"cloudconsole": osid
@@ -69,14 +64,14 @@ def save_tokens(gdoc_token, hangouts_auth, hangouts_token, internal_token, inter
f.write(json.dumps(output))
def get_hangouts_tokens(cookies):
""" Return the API key used by Hangouts for
def get_chat_tokens(cookies):
""" Return the API key used by Google Chat for
Internal People API and a generated SAPISID hash."""
hangouts_key = "AIzaSyD7InnYR3VKdb4j2rMUEbTCIr2VyEazl6k"
hangouts_auth = f"SAPISIDHASH {gen_sapisidhash(cookies['SAPISID'], 'https://hangouts.google.com')}"
chat_key = "AIzaSyB0RaagJhe9JF2mKDpMml645yslHfLI8iA"
chat_auth = f"SAPISIDHASH {gen_sapisidhash(cookies['SAPISID'], 'https://chat.google.com')}"
return (hangouts_auth, hangouts_key)
return (chat_key, chat_auth)
def get_people_tokens(cookies):
""" Return the API key used by Drive for
@@ -159,9 +154,29 @@ def getting_cookies(cookies):
return cookies
def get_driver(cookies = {}):
driverpath = get_driverpath()
chrome_options = get_chrome_options_args(config.headless)
options = {
'connection_timeout': None # Never timeout, otherwise it floods errors
}
tmprinter.out("Starting browser...")
driver = webdriver.Chrome(
executable_path=driverpath, seleniumwire_options=options,
options=chrome_options
)
driver.header_overrides = config.headers
driver.get('https://www.google.com/robots.txt')
for k, v in cookies.items():
driver.add_cookie({'name': k, 'value': v, 'domain': '.google.com'})
return driver
if __name__ == '__main__':
driverpath = get_driverpath()
driver = None
cookies_from_file = get_saved_cookies()
tmprinter = TMPrinter()
@@ -175,7 +190,8 @@ if __name__ == '__main__':
new_cookies_entered = True
else:
# in case user wants to enter new cookies (example: for new account)
html = get_authorization_source(cookies_from_file)
driver = get_driver(cookies_from_file)
html = get_authorization_source(driver)
valid_cookies = check_cookies(cookies_from_file)
valid = False
if html and valid_cookies:
@@ -190,11 +206,13 @@ if __name__ == '__main__':
elif not valid:
exit("Please put valid cookies. Exiting...")
if not driver:
driver = get_driver(cookies)
# Validate cookies
if new_cookies_entered or not cookies_from_file:
html = get_authorization_source(cookies)
html = get_authorization_source(driver)
if html:
print("\n[+] The cookies seems valid !")
else:
@@ -208,19 +226,6 @@ if __name__ == '__main__':
# Start the extraction process
# We first initialize the browser driver
chrome_options = get_chrome_options_args(config.headless)
options = {
'connection_timeout': None # Never timeout, otherwise it floods errors
}
tmprinter.out("Starting browser...")
driver = webdriver.Chrome(
executable_path=driverpath, seleniumwire_options=options,
options=chrome_options
)
driver.header_overrides = config.headers
print("Extracting the tokens...\n")
# Extracting Google Docs token
trigger = '\"token\":\"'
@@ -239,12 +244,13 @@ if __name__ == '__main__':
print(f"People API Key => {people_key}")
print(f"People API Auth => {people_auth}")
# Extracting Hangouts tokens
hangouts_key, hangouts_token = get_hangouts_tokens(cookies_with_osid)
print(f"Hangouts Key => {hangouts_token}")
print(f"Hangouts Auth => {hangouts_key}")
# Extracting Chat tokens
chat_key, chat_auth = get_chat_tokens(cookies_with_osid)
print(f"Chat Key => {chat_key}")
print(f"Chat Auth => {chat_auth}")
cac_key = get_clientauthconfig_key(cookies_with_osid)
print(f"Client Auth Config API Key => {cac_key}")
save_tokens(gdoc_token, hangouts_key, hangouts_token, people_key, people_auth, cac_key, cookies, osid)
save_tokens(gdoc_token, chat_key, chat_auth, people_key, people_auth, cac_key, cookies, osid)

8
lib/utils.py
View File

@@ -69,16 +69,16 @@ def update_emails(emails, data):
return emails
def is_email_google_account(httpx_client, auth, cookies, email, hangouts_token):
def is_email_google_account(httpx_client, auth, cookies, email, key):
host = "https://people-pa.clients6.google.com"
url = "/v2/people/lookup?key={}".format(hangouts_token)
body = """id={}&type=EMAIL&matchType=EXACT&extensionSet.extensionNames=HANGOUTS_ADDITIONAL_DATA&extensionSet.extensionNames=HANGOUTS_OFF_NETWORK_GAIA_LOOKUP&extensionSet.extensionNames=HANGOUTS_PHONE_DATA&coreIdParams.useRealtimeNotificationExpandedAcls=true&requestMask.includeField.paths=person.email&requestMask.includeField.paths=person.gender&requestMask.includeField.paths=person.in_app_reachability&requestMask.includeField.paths=person.metadata&requestMask.includeField.paths=person.name&requestMask.includeField.paths=person.phone&requestMask.includeField.paths=person.photo&requestMask.includeField.paths=person.read_only_profile_info&requestMask.includeContainer=AFFINITY&requestMask.includeContainer=PROFILE&requestMask.includeContainer=DOMAIN_PROFILE&requestMask.includeContainer=ACCOUNT&requestMask.includeContainer=EXTERNAL_ACCOUNT&requestMask.includeContainer=CIRCLE&requestMask.includeContainer=DOMAIN_CONTACT&requestMask.includeContainer=DEVICE_CONTACT&requestMask.includeContainer=GOOGLE_GROUP&requestMask.includeContainer=CONTACT"""
url = "/v2/people/lookup?key={}".format(key)
body = """id={}&type=EMAIL&matchType=EXACT&coreIdParams.useRealtimeNotificationExpandedAcls=true&requestMask.includeField.paths=person.email&requestMask.includeField.paths=person.gender&requestMask.includeField.paths=person.in_app_reachability&requestMask.includeField.paths=person.metadata&requestMask.includeField.paths=person.name&requestMask.includeField.paths=person.phone&requestMask.includeField.paths=person.photo&requestMask.includeField.paths=person.read_only_profile_info&requestMask.includeContainer=AFFINITY&requestMask.includeContainer=PROFILE&requestMask.includeContainer=DOMAIN_PROFILE&requestMask.includeContainer=ACCOUNT&requestMask.includeContainer=EXTERNAL_ACCOUNT&requestMask.includeContainer=CIRCLE&requestMask.includeContainer=DOMAIN_CONTACT&requestMask.includeContainer=DEVICE_CONTACT&requestMask.includeContainer=GOOGLE_GROUP&requestMask.includeContainer=CONTACT"""
headers = {
"X-HTTP-Method-Override": "GET",
"Authorization": auth,
"Content-Type": "application/x-www-form-urlencoded",
"Origin": "https://hangouts.google.com"
"Origin": "https://chat.google.com"
}
req = httpx_client.post(host + url, data=body.format(email), headers=headers, cookies=cookies)

14
modules/email.py
View File

@@ -30,9 +30,9 @@ def email_hunt(email):
if not isfile(config.data_path):
exit("Please generate cookies and tokens first, with the check_and_gen.py script.")
hangouts_auth = ""
hangouts_token = ""
chat_auth = ""
chat_key = ""
internal_auth = ""
internal_token = ""
@@ -40,16 +40,16 @@ def email_hunt(email):
with open(config.data_path, 'r') as f:
out = json.loads(f.read())
hangouts_auth = out["hangouts_auth"]
hangouts_token = out["keys"]["hangouts"]
chat_auth = out["chat_auth"]
chat_key = out["keys"]["chat"]
internal_auth = out["internal_auth"]
internal_token = out["keys"]["internal"]
cookies = out["cookies"]
client = httpx.Client(cookies=cookies, headers=config.headers)
data = is_email_google_account(client, hangouts_auth, cookies, email,
hangouts_token)
data = is_email_google_account(client, chat_auth, cookies, email,
chat_key)
is_within_docker = within_docker()
if is_within_docker: