#!/usr/bin/env python

import os
import sys
import csv
import json

OUTPUT_FORMATS = ('csv', 'tsv', 'json', 'yara', 'netflow', )


def getHandler(output_format):
    output_format = output_format.lower()
    if output_format not in OUTPUT_FORMATS:
        print("[WARNING] Invalid output format specified... using CSV")
        output_format = 'csv'

    handler_format = "OutputHandler_" + output_format
    handler_class = getattr(sys.modules[__name__], handler_format)

    return handler_class()


class OutputHandler(object):
    def print_match(self, fpath, page, name, match):
        pass

    def print_header(self, fpath):
        pass

    def print_footer(self, fpath):
        pass

    def print_error(self, fpath, exception):
        print("[ERROR] %s" % (exception))


class OutputHandler_csv(OutputHandler):
    def __init__(self):
        self.csv_writer = csv.writer(sys.stdout, delimiter = '\t')

    # Added flag and sheet which are unused but needed to make CSV output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        self.csv_writer.writerow((fpath, page, name, match, sheet))

    def print_error(self, fpath, exception):
        self.csv_writer.writerow((fpath, '0', 'error', exception))

class OutputHandler_tsv(OutputHandler):
    def __init__(self):
        self.csv_writer = csv.writer(sys.stdout, delimiter = '\t', quoting=csv.QUOTE_NONNUMERIC)

    def print_match(self, fpath, page, name, match):
        self.csv_writer.writerow((fpath, page, name, match))

    def print_error(self, fpath, exception):
        self.csv_writer.writerow((fpath, '0', 'error', exception))


class OutputHandler_json(OutputHandler):    
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        """ @param flag:
            0 = default (pdf/txt/html)
            1 = gmail
            2 = csv
            3 = xls and xlsx
        @param sheet    The sheet being parsed if Excel spreadsheet (single or multi-sheet)
        """
        if flag == 0 or flag == 2:
            data = {
                'path' : fpath,
                'file' : os.path.basename(fpath),
                'page' : page,
                'type' : name,
                'match': match
            }
        elif flag == 1:
            data = {
                'input' : 'gmail',
                'subject' : fpath,
                'type' : name,
                'match': match
            }
        elif flag == 3:
            data = {
                'path' : fpath,
                'file' : os.path.basename(fpath),
                'sheet' : sheet,
                'line' : page,
                'type' : name,
                'match': match,
            }
        print(json.dumps(data))

    def print_error(self, fpath, exception):
        data = {
            'path'      : fpath,
            'file'      : os.path.basename(fpath),
            'type'      : 'error',
            'exception' : exception
        }

        print(json.dumps(data))


class OutputHandler_yara(OutputHandler):
    def __init__(self):
        self.rule_enc = ''.join(chr(c) if chr(c).isupper() or chr(c).islower() or chr(c).isdigit() else '_' for c in range(256))

    # Added flag and sheet which are unused but needed to make YARA output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        if name in self.cnt:
            self.cnt[name] += 1
        else:
            self.cnt[name] = 1

        string_id = "$%s%d" % (name, self.cnt[name])
        self.sids.append(string_id)
        string_value = match.replace('\\', '\\\\')
        print("\t\t%s = \"%s\"" % (string_id, string_value))

    def print_header(self, fpath):
        rule_name = os.path.splitext(os.path.basename(fpath))[0].translate(self.rule_enc)

        print("rule %s" % (rule_name))
        print("{")
        print("\tstrings:")

        self.cnt = {}
        self.sids = []

    def print_footer(self, fpath):
        cond = ' or '.join(self.sids)

        print("\tcondition:")
        print("\t\t" + cond)
        print("}")


class OutputHandler_netflow(OutputHandler):
    def __init__(self):
        print("host 255.255.255.255")

    # Added flag and sheet which are unused but needed to make Netflow output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        data = {
            'type' : name,
            'match': match
        }

        if data["type"] == "IP":
            print(" or host %s " % data["match"])

#!/usr/bin/env python

import os
import sys
import csv
import json

OUTPUT_FORMATS = ('csv', 'tsv', 'json', 'yara', 'netflow', )


def getHandler(output_format):
    output_format = output_format.lower()
    if output_format not in OUTPUT_FORMATS:
        print("[WARNING] Invalid output format specified... using CSV")
        output_format = 'csv'

    handler_format = "OutputHandler_" + output_format
    handler_class = getattr(sys.modules[__name__], handler_format)

    return handler_class()


class OutputHandler(object):
    def print_match(self, fpath, page, name, match):
        pass

    def print_header(self, fpath):
        pass

    def print_footer(self, fpath):
        pass

    def print_error(self, fpath, exception):
        print("[ERROR] %s" % (exception))


class OutputHandler_csv(OutputHandler):
    def __init__(self):
        self.csv_writer = csv.writer(sys.stdout, delimiter = '\t')

    # Added flag and sheet which are unused but needed to make CSV output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        self.csv_writer.writerow((fpath, page, name, match, sheet))

    def print_error(self, fpath, exception):
        self.csv_writer.writerow((fpath, '0', 'error', exception))

class OutputHandler_tsv(OutputHandler):
    def __init__(self):
        self.csv_writer = csv.writer(sys.stdout, delimiter = '\t', quoting=csv.QUOTE_NONNUMERIC)

    def print_match(self, fpath, page, name, match):
        self.csv_writer.writerow((fpath, page, name, match))

    def print_error(self, fpath, exception):
        self.csv_writer.writerow((fpath, '0', 'error', exception))


class OutputHandler_json(OutputHandler):    
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        """ @param flag:
            0 = default (pdf/txt/html)
            1 = gmail
            2 = csv
            3 = xls and xlsx
        @param sheet    The sheet being parsed if Excel spreadsheet (single or multi-sheet)
        """
        if flag == 0 or flag == 2:
            data = {
                'path' : fpath,
                'file' : os.path.basename(fpath),
                'page' : page,
                'type' : name,
                'match': match
            }
        elif flag == 1:
            data = {
                'input' : 'gmail',
                'subject' : fpath,
                'type' : name,
                'match': match
            }
        elif flag == 3:
            data = {
                'path' : fpath,
                'file' : os.path.basename(fpath),
                'sheet' : sheet,
                'line' : page,
                'type' : name,
                'match': match,
            }
        print(json.dumps(data))

    def print_error(self, fpath, exception):
        data = {
            'path'      : fpath,
            'file'      : os.path.basename(fpath),
            'type'      : 'error',
            'exception' : exception
        }

        print(json.dumps(data))


class OutputHandler_yara(OutputHandler):
    def __init__(self):
        self.rule_enc = ''.join(chr(c) if chr(c).isupper() or chr(c).islower() or chr(c).isdigit() else '_' for c in range(256))

    # Added flag and sheet which are unused but needed to make YARA output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        if name in self.cnt:
            self.cnt[name] += 1
        else:
            self.cnt[name] = 1

        string_id = "$%s%d" % (name, self.cnt[name])
        self.sids.append(string_id)
        string_value = match.replace('\\', '\\\\')
        print("\t\t%s = \"%s\"" % (string_id, string_value))

    def print_header(self, fpath):
        rule_name = os.path.splitext(os.path.basename(fpath))[0].translate(self.rule_enc)

        print("rule %s" % (rule_name))
        print("{")
        print("\tstrings:")

        self.cnt = {}
        self.sids = []

    def print_footer(self, fpath):
        cond = ' or '.join(self.sids)

        print("\tcondition:")
        print("\t\t" + cond)
        print("}")


class OutputHandler_netflow(OutputHandler):
    def __init__(self):
        print("host 255.255.255.255")

    # Added flag and sheet which are unused but needed to make Netflow output work
    def print_match(self, fpath, page, name, match, flag, sheet=''):
        data = {
            'type' : name,
            'match': match
        }

        if data["type"] == "IP":
            print(" or host %s " % data["match"])

#!/usr/bin/env python # Added flag and sheet which are unused but needed to make CSV output work @param flag:             0 = default (pdf/txt/html)             1 = gmail             2 = csv             3 = xls and xlsx         @param sheet    The sheet being parsed if Excel spreadsheet (single or multi-sheet) # Added flag and sheet which are unused but needed to make YARA output work # Added flag and sheet which are unused but needed to make Netflow output work