# -*- coding: utf-8 -*-
import http.client
import json
import ssl
import requests
import os
import platform

from requests.packages.urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)

### Variables
API="*****"
INTELX_URL="3.intelx.io"
DOMAIN="mydomain.tld"
PASSWD_FILE="/etc/httpd/modsecurity.d/leaked_password.txt"

def reloadHttp():
        ### Dirty, but we're fine with it
        configtest = os.system('sudo service httpd configtest')
        if configtest == 0:
                os.system('sudo service httpd reload')

def main():
        ### Init password list
        myPassword = []

        ### Get all password
        url = 'https://'+INTELX_URL+'/accounts/1?selector='+DOMAIN+'&limit=1000000'

        headers = {
                'X-Key': API
        }

        response = requests.request("GET", url, headers=headers, verify=False)
        intelx_result = json.loads(response.text.encode('utf8'))

        for leak in intelx_result:
                if leak["passwordtype"] == "Plaintext":
                        if leak["password"] not in myPassword:
                                myPassword.append(leak["password"])

        myPassword_sorted = sorted(myPassword)

        ### Get all password in current file
        with open(PASSWD_FILE) as f:
                lines = f.read().splitlines()

        ### Compare both lists for any changes
        temp_1 = set(myPassword_sorted)
        temp_2 = set(lines)
        if temp_1 != temp_2:
                with open(PASSWD_FILE, "w") as fp:
                        for password in myPassword_sorted:
                                fp.write("%s\n" % password)
                reloadHttp()

if __name__ == '__main__':
        main()