foundation_security_advisories/update_hof.py

#!/usr/bin/env python3
# -*- coding: utf8 -*-

import requests
import argparse
import pprint
import json
import sys
import re
import hmac
import time
from datetime import datetime
import os
import base64

from requests.adapters import HTTPAdapter
from requests.packages.urllib3.util.retry import Retry

HEADERS = { 'Accept': 'application/json' }
BASE_URL = 'https://bugzilla.mozilla.org/rest/'
HMAC_KEY_ATTACHMENT_ID = 9133354 # Bug 1622495
search_url = BASE_URL + 'bug' + \
"""
?x=x
&limit=0
&f1=classification
&o1=notequals
&v1=Graveyard
&f2=OP
&j2=OR
&j3=OR
&f3=OP
&f4=flagtypes.name
&o4=substring
&v4=sec-bounty-hof%2B
&f5=flagtypes.name
&o5=substring
&v5=sec-bounty%2B
&f6=CP
&f7=OP
&f8=alias
&o8=substring
&v8=CVE-
&f9=flagtypes.name
&o9=substring
&v9=sec-bounty-
&f10=CP
&f11=CP
&classification=Client%20Software
&classification=Developer%20Infrastructure
&classification=Components
&classification=Server%20Software
&classification=Other
""".replace("\n", "")

CVE_REVIEW = """
https://bugzilla.mozilla.org/buglist.cgi?x=x
&classification=Client%20Software
&classification=Developer%20Infrastructure
&classification=Components
&classification=Server%20Software
&classification=Other
&f1=flagtypes.name
&o1=substring
&v1=sec-bounty-
&f2=alias
&o2=substring
&v2=CVE-YEAR_REPLACEME
&f3=flagtypes.name
&o3=notsubstring
&v3=sec-bounty-hof%2B
&o4=notsubstring
&f4=flagtypes.name
&v4=sec-bounty-hof-
""".replace("\n", "")

credit_entries = {
    "1608055575dcd5e30720b67f791a76b7":"Paul Gerste",
    "a23ac0dcff0ce1a657a69b883d21a172":"Lucas B. Williams",
    "3490e6039ac18c638dc25092b1bcd7a3":"Christian James",
    "5e96fa378ab43940c417698a76776e5d":"Sun ZhiWei from Lenovo GIC security lab",
    "8e6b391e991ef4dd7c1d3609be413b74":"Renwa Hiwa",
    "b612ef16f16c1d0c74349356c0d2a6b7":"Dong-uk Kim",
    "455583182ba2e5c9b5a802e4e7da8bf9":"Bharat (mrnoob)",
    "f61a89bd95c4b84b6c6c79c988267950":"Jurrie Overgoor",
    "e63fe129212ef68d6d29c8762aa090d7":"Lishuo Song",
    "d26d3f4b54a07b5db8c2e7a8cd58863c":"Seunghyun Lee (@0x10n)",
    "8552289e4e172662b16295290c789fa9":"Nils Bars",
    "8b37f9bddc61920163d071f779926e25":"Rifa'i Rejal Maynando",
    "843552576234c045916e6e9248397aac":"Om Apip",
    "e0a74b5439f07d3b31735873861f5f45":"Dalmurino",
    "96c531dfd57734b6e7545668dc632153":"jackyzy823",
    "97ff7dcf51f14fadf8adc2de15c80239":"Jędrzej Krysztofiak",
    "868d31abeba00933f46ddaf75acbb47e":"Adam Berry",
    "4bbef8fdf0aaedd24685c156c3156978":"Bahaa Naamneh",
    "3a3a83f666d751521815bc3bf0abb993":"Paul Ducos-Saksela",
    "bb7b2f03afba96797f2a0583a1e9b2c5":"goodbyeselene",
    "09374a6ae9f8606ab65de70c9cd6d455":"Gregory Pappas",
    "fb99b1caf1b9d2533e9c960aca901dd9":"Narendra Bhati from Suma Soft Pvt. Ltd",
    "f8c612c2ea4acc003c3d14602343b148":"Nan Wang",
    "8d915cd3bb3b4521c2faebed94b20c00":"Yaksh Bariya",
    "27526bd467c0513ae02efb663aadd58f":"Renan Rios (hyhy_100)",
    "2badcfbf0635b789d02eb03086ccc1bd":"Shanbo Chen (Reshahar) of NSFOCUS Tianji Lab.",
    "f5d43940f8686622940287507ddeb1b9":"JSec of Hayyim Security",
    "b9d7ff0b05dda6647339884dddcbd462":"Zeyu Zhang",
    "19cf699e96dadbbf1b8789b9f60b8474":"kaed.e",
    "b35db3b4e14eb5d6b9719ce45ea3e45a":"Yaswant (Az3z3l)",
    "b9a6307c3a098387557dab8537c59a70":"Kazuki Nomoto",
    "b9a6307c3a098387557dab8537c59a70":"Kazuki Nomoto",
    "b413517899d16075631dc85a69fb0da6":"sonakkbi",
    "b413517899d16075631dc85a69fb0da6":"sonakkbi",
    "b413517899d16075631dc85a69fb0da6":"sonakkbi",
    "f659e7a2e5f950fe2acbbcf5afc08629":"P Umar Farooq",
    "d2c85150e90ea3483a1864e20d44205e":"Meta-Press.es Dev Team",
    "6c7ad302d6440e0ef7085e5e7c0262c4":"zx from qriousec",
    "d3c5747f3d72aedb8c7d9ba30163f27a":"Jiyeon Lee",
    "fefefe38f8c62015edb2b2e295eeaef6":"Khiem Tran",
    "ad935713e8a3860ffac9edcd32707fd1":"Shaheen Fazim",
    "d3010c7ab380ac4f0796a875d10b9266":"Ameen Basha M K",
    "9f059eb3b4eba569bba477ee0bc95350":"Lohith Gowda M",
    "1c5aa3f06dd0263874f6c4f36acaf9aa":"Edward 'JankhJankh' Prior",
    "d95fb2b54e0b81565e15e10734bcfa94": "Orion Joshi",
    "d5716b05696f59f850b9dad8ed0b0d43":"Mohd Ali - Student of Muffakhamjah College Of Engineering",
    "733f005d44b2f8386d9db80cb301842c":"AnupamAS01",
    "28bae65040e11cd63f9dd135eac744ab":"Yahia benkaddour",
    "a021b107a1bbc624d7cd8435abf7a84f":"Chris Langton",
    "77c1bae6fa26a21ec93ff406fad19cc9":"Valeriy Shevchenko",
    "0c6e6a0325f2fb50800d56e4067100ce":"Joern Schneeweisz",
    "c7bf60509470e779de213f6fc17acb23":"Jimmy Bruneel",
    "544c25e9541e359d8daa1a88487b8541": "Michal Biesiada",
    "52eef32d4db6d18d2ef539868933b1ef":"Tim Coen",
    "0078828862f4973eece40d1be8510a0b":"Jayateertha Guruprasad",
    "918c93c03389817a230ce0b462634fde":"Manojkumar J",
    "0d2e405bda8a025f471b28904acaa766":"April King",
    "8c69a76d853e3002e457c95aab599317":"scarlet",
    "042ce73faaaaf8862e36f31eedee3fb3":"Willy R. Vasquez (wrv)",
    "69e181768b9fc29f3ab0e7c668ce89ad":"Sam Ezeh",
    "8222a267aa38fb97e9e1535d05383445":"daniel_v",
    "f4ff034629bf0d9943a31a5437c3c1fe":"Chester van den Bogaard",
    "875bd7d8b1b73f362dfaaf486bcae23e":"40826d",
    "028ff665214190ae419f0febbdff465f" : "James Grant",
    "047a2ade7fdc3c6d84d5dbea228fe71e" : "Julien Maladrie",
    "05c9059021985684d94c2631e62b9d12" : "Zhang Hanming from 360 Vulcan team",
    "061748177265860816977bb65cc0147a" : "Brandon Roldan",
    "0a01a5e6c30ea6e71f5ce82750529c8c" : "Gareth Heyes",
    "0a446dcb43d3f9f5da29afb14a40e58f" : "Taegeon Lee",
    "0add10eeb3f4f6b4ce9aee50e6e8e08d" : "Aaron Costello",
    "0c239777752cc449e91df93984e4c0c8" : "Irwan",
    "0c7f4b38ad0b504cfc48042e14564cc8" : "Paul Stone",
    "0cdb9b89f615c444f832e56c844e9e75" : "Allyson O'Malley",
    "0eaafbf6f9aabe86a4b040ca50d9191a" : "Shinto K Anto",
    "0f05e10145035903cbb34aac06f3edf6" : "Anonymous",
    "0f14322cc49704ac5551ffe5835abd69" : "Sree Visakh Jain (@sreevisakhjain)",
    "0fc499252d7f74175967ba225e186ed9" : "André Bargull",
    "0fed7c4928e7623eeabf7c040b6bc4a5" : "musicDespiteEverything",
    "11adc383a41d3f1fead9661104782014" : "Ronen Zilberman",
    "1248a90a05c7e3a46b97e6aceeb557ce" : "SkyLined",
    "13215febfe461aae88eda362e7c96cee" : "Eili Masami of Tachibana Lab",
    "14f41cb4275ed7f671a593138b886e84" : "Yasin Soliman",
    "158f1b632674edbf228a5d98269822af" : "Christian Holler",
    "15acbd736229d79a8ed92e690164559c" : "Nils André-Chang",
    "15c2f9fe6f16230593ed3c11324c155e" : "Maor Kleinberger",
    "1605f48b44fd0a67c5a76371334aaa28" : "Axel Chong",
    "164a35fccb05c6bb8a26d881da42bda7" : "Muneaki Nishimura (a.k.a. nishimunea)",
    "18844199a107c0665b6de05b47ce0340" : "Colin D. Munro",
    "192aac4383d85b9acf43554612c6b461" : "Vitaly Nevgen",
    "192e0a963474e27f64bf46f0ddde8268" : "Seb Patane",
    "1a20e0311c4352bb986d6e876d4b6e89" : "Fourteenforty Research Institute Japan",
    "1a99b22b84db560244569dcbe868dcd0" : "Andrew Krasichkov",
    "1ababea19b88a30da141dca3bdf006d4" : "sushi Anton Larsson",
    "1ad1f39c1e7968ff5cfe318281e0455f" : "Tyson Smith",
    "1b46bfa367b8cddece232ebfddaccc9d" : "Fabián Cuchietti",
    "1c04ef59bd60189ce09cfca187225e75" : "Mohammed Fayez Ahmed Albanna",
    "1cc583009e744f3a2e63c6ca0ca72c10" : "Dhiraj Mishra",
    "1ced3fc2a9846c0b8a9e99db5416fc29" : "Holger Fuhrmannek",
    "1d239c1ff42a3e8e1c16c976020fd45f" : "Philipp Kewisch",
    "1d2c94a3301ca111ff6bb161b3069a9c" : "redparsec",
    "1d6eb1c6e8a177847eca74cad00fc301" : "José María Acuña Morgado",
    "1e304bfde59dcfb0131e21e913281614" : "Luigi Gubello",
    "1e7c9dd1924cf9763c2507c94be341c2" : "Linus Särud",
    "1ffe73fabf298c651b7a8c750de530d2" : "Siraje Amarniss of Fukusa",
    "20d9d642fb41b3732cf919a8eb256d2d" : "Mario E. Mejia",
    "21c712eaa986e0ae3e135fe689259684" : "Matthew Somerville",
    "2841918025ae79884c3eac763a453b76" : "Jens Gorontzi",
    "2920656b8c8d785f7ccecab735a106a8" : "SkyLined",
    "2bb8b9860ce62f3fbc9e7eec1a9d5ed0" : "Giorgio Maone of NoScript",
    "2cbc00679c4b47da86d775e2c98d4bd6" : "Zhou Yuyang",
    "302a4e6aa69950cd60e295d433440bd3" : "Gustavo Grieco",
    "305a3f15dfabae7353bf675ca5b7a23d" : "Yangkang of 360 ATA Team",
    "311d66bfb9fbda45dc6920920a9efb5e" : "Andrea.",
    "315a4e71ad122182426d8da0d5d1e8fb" : "Michael Smith",
    "31b9334ff2ac135414563035a5c11823" : "Context Information Security",
    "337554f7f0ac9ded2ef6110a7a12910b" : "David Dworken",
    "342df00dfa13da31ecc6efe69d5f6da6" : "moz_bug_r_a4",
    "3597ac4747474360b391a5e359948ca9" : "Mario Gomes",
    "359ee9ee2e4c35e5fa8097e48bd22c50" : "Vladimir Metnew",
    "373ff2b767419c0619f3991348f8d930" : "David Chan",
    "37a2557cee7c4198951b1af8b1243a2e" : "Georg Koppen of The Tor Project",
    "38161e481b381a72de3c4804a292d4ab" : "Atte Kettunen",
    "39897587a528519753812e6f6256f6bd" : "firehack",
    "399471310b07538c814c230e9029b0bb" : "Wladimir Palant",
    "3a98d1971bc7fab8d457063492a5a467" : "Rafay Baloch of Pakistan Telecommunications Authority ",
    "3c098d6ead472177028bde34acacb5f1" : "Takeshi Terada of Mitsui Bussan Secure Directions Inc.",
    "3c9e02bf1983fa620099841bb91ea3e0" : "Sergey Bobrov",
    "3ce577ba2fed1b2decbeb3eb4e466f8d" : "Alesandro Ortiz",
    "3f3a7252004367671037582e9dde174d" : "Luca Moretto",
    "3f3fae9ad20da4c5655ceda765563e6c" : "Benjamin Kunz Mejri",
    "3fd6daa83cd0821ca8584ad0c74e34d1" : "Chaobin Zhang",
    "4209a557d472db164e9394a5d8ed7d6b" : "Johan Carlsson",
    "43b406ebd2c3d45534aec1e4843ba504" : "Bharadwaj Machiraju",
    "45b6c8b674aa0d31c437d7220d6a9f39" : "Khan Janny",
    "45e5fe739d4a915a757b37940170e852" : "Harry Gertos",
    "4649493b3babcd55144931b73a973bce" : "Yaniv Frank with SophosLabs",
    "46b96542a8687c90e46400e780b6b4ac" : "Anonymous",
    "47403ba3cf9bcae0874a07f299f643f0" : "Chris Rohlf",
    "480d732942ba3ecdedf961ce3fa9fc64" : "Ademar Nowasky Junior",
    "49c31aaa040fce3a5fcaf771ad56b382" : "AaylaSecura1138",
    "4a5880b0447f7349c9cbcff76045b3e6" : "Rayyan Bijoora",
    "4a66274c7f1063c7ef3b3c3d9f747566" : "Craig Disselkoen",
    "4b52df50eaaf097f6f062bfea6cf0abe" : "Artur Osiński (Virtual_ManPL)",
    "4b7fd0d6665950db856bc5e22846f719" : "Tobias Klein",
    "4bf2165b96b2506a0ac2212b39fb78b1" : "Clémentine Maurice",
    "4cb38b42bb161ce775b5e7f91d260d3f" : "Daniel Maksimovic",
    "4cc72613ad5eb1dc54b6acf0be217aed" : "Mattias Jacobsson",
    "4e5928d45d9922eb5a29a3e1d2e6cb43" : "Alison Huffman",
    "4ea165c7445cfa9a7ed0685e64cdf1fb" : "Paul Stone of Context Information Security",
    "5080064df3a2c21441c9fb6cc3b5f816" : "Jerry Decime",
    "50ab8d7a3724d141c8f5cd8797d66977" : "Xiaoyin Liu",
    "55f0363f4c86284fe5689525c5640c32" : "Riccardo Ancarani",
    "57cdfb795bf462560baef0c7da02d658" : "Suhwan Song of SNU CompSec Lab",
    "59260d270baa2ce555fcf323c46d0c03" : "Codermak",
    "5fbaf4a6794928a04644d7a0a73f7141" : "Alexander Klink",
    "647f1e3053ac60b34405e11876ec02e4" : "Juho Nurminen of Mattermost",
    "64e04ce43d3007a00b51c63553c48efb" : "p4fg",
    "654445704639346f526d1ef514d08fd7" : "ACROS Security",
    "668988e8a957c941b5b3619cfdc005d1" : "XiaoXiong(superxx) of Qihoo 360 CERT",
    "66c52290aeab671fa01c2e062f6c2e01" : "Karl Aparece",
    "690334c0cae6df099269d105526a42f3" : "Jordi Chancel",
    "6ad1bb0dc84782bff4c77cc96954b150" : "Alessio Della Libera",
    "6b04af2a3e852190d05cc5a05b438d2e" : "Ulrich Günther",
    "6c5314d59c2e56564b18fe6199305fd3" : "Abdellah Nadi",
    "704b002c6bd62215d3738f6fe9c6524a" : "Gregory Smiley of Security Compass",
    "70cc13ce2ba436916140efa887a10fca" : "Falko Strenzke of cryptosource GmbH",
    "71106bd16473852ff8d395e9eb2be45c" : "mlfbrown",
    "719febfa274b646e3b33d2b9f95885c4" : "obmi",
    "723fd46df5eb10ad0fa79da65d7cc961" : "Samuel Erb",
    "740b81a60bd25700b839f63e8d937796" : "Karthik Kumar reddy",
    "7495547634e174c0e2f49e939d6fe3ee" : "Scott Bell",
    "74babab05ed106d8a937c4ff19e7dbac" : "Dylan Farrar",
    "75488be765fd509d904767102b6bb6b7" : "Mario Heiderich",
    "755ae0590425c02b3c203036df1a7e1e" : "Tim Hemel",
    "75b14a4315405e7480d0620b8eb3c11c" : "Flo van der vlist",
    "763dcd98e7052a2d6ccebdc6cddec7a3" : "Tuan Anh Nguyen from Viettel Cyber Security",
    "7645f2eb64dccd9602b24b6ce9fce138" : "Chun Han Hsiao",
    "76d59fb088161da3466512c6d304ca2f" : "Jordi Chancel",
    "77af16493363287bc9b6ed99548293d7" : "Aryan Sinha",
    "77b1dc2043055d86d9e81b5035efe29f" : "Irvan Kurniawan (sourc7)",
    "78eeb94fe5fe67f95d9cd574d9ec69db" : "Inko",
    "7a3d52ef9f515ad5d4aad5868c2e65aa" : "Chamal De Silva",
    "7aba285c7e4b7f41df3dae6f4becd2a9" : "Sebas (@0xroot)",
    "7b33d07bc038c1ec083e51e31e139fdb" : "Joshua Graham of TSS",
    "7bd9d5640cb0f0dd5e59ccd7b02a0349" : "Abraruddin Khan and Omair",
    "7bed3bd152a0fd4badc6d2ddd4e86e1b" : "Rafael Gieschke",
    "7c486bb32d071d87dbead8d428bd3dfd" : "Naly",
    "7dc3304d4c7f8d13fa0f248f54b07a20" : "Kaspar Brand",
    "7e1e41ab0cd46a4a32c82def7b840a6d" : "Mario Heiderich of Cure53",
    "7ec079736a63d226ce3b436b5f49b1d9" : "Daniel Santos",
    "7edb6115b239d771b9689857b9e95568" : "Hanno Böck",
    "7fa6444936bd7ae17ecad924fca93c6d" : "Luis Merino - Brandon Perry",
    "80e0b8cb2a22f8b9669d2ca1968ce898" : "Eduard Wirch",
    "81236113f95cd9d1591343e78fe204c5" : "Dongsung Kim",
    "815f2b92b84655f6a7e9e53ad10e78f4" : "Mitchell Harper",
    "817bd7bdff0d93ccdada8707b5278a08" : "Alexander Nagy",
    "82d7844614f152d6865e83d43f040a8b" : "Antonio Sanso",
    "8314603008777278fd70c0b9b4f01645" : "Adam Barth",
    "8363fd9f9f37fbaf5d600e676bf3aec5" : "Muhammad R. Maulana",
    "8425ef2a3a2007409b50dea485ca0422" : "Cybeats PSI Team",
    "853c74a41a0a08216a565eb558b2c4c4" : "bo13oy of Qihoo 360 Vulcan Team",
    "87b3f4e2ea33d7e5aea49e26dab8ab5b" : "Jethro Beekman - Security Researcher at University of California - Berkeley",
    "87c66fa50295d7055022c4625c76b208" : "Rain",
    "887ba2d86d5c5c29814a38c371854928" : "Soroush Dalili",
    "89a138d6477c6a80b7f6c2e59a6c2fa4" : "Anurag Jain",
    "89ae6542ce619780d318477fe724bb57" : "gfleischer",
    "8aeb1a975c9c817eb6638851058fa5f2" : "redparsec",
    "8de462f5f2d47748bcd761a45f2f157c" : "Nicolas Golubovic",
    "8f3b70144b559447d576b239d48e3b77" : "Max May",
    "8ff363f2185736b3ad47f35f8140c82a" : "Mei Wang of GearTeam Qihoo 360.",
    "9219e61c33ff1e2d14b670b865caffa8" : "Nikhil Mittal",
    "9228cdb27944fb384f1305d2d0c350b8" : "Tushar Rawool",
    "92979b13d84087187a7d5630e1c76b87" : "Luke Li",
    "92fcab73ced9591bffb1dbb8a4bf3ab4" : "Brandon Roldan",
    "937c35a7adce7a73254cf0c2ed905e9c" : "Raphael Shaniyazov",
    "940a6b73a009cb437c868e8e3c0dc779" : "Aariz Khan",
    "9513cb577e79e3f73e3af0886ba27e70" : "Hou JingYi",
    "95663a4cc4fa467fdd949b16b6e03760" : "knud",
    "9667bad21b75845c367e1c91ea59d788" : "jensvoid",
    "9684d8c1d955335cb2ba23ddab9769ac" : "Rotem Kerner",
    "96b79d035cfa51215a941052528e9182" : "Michał Bentkowski",
    "977f16d94af9ed0b87f3d10b766f4f07" : "Jesse Luoto",
    "9832ee85d3227243306872874b7157ea" : "Jianjun Chen",
    "9a653dd5b8871f60bd37caaa411d427a" : "Saad Alhrby",
    "9a7ef4ebc1fe8c5e7f59016564db97b4" : "Yossi Oren",
    "9a9379446b32063fe371d116fb21deef" : "Leo Starcevic",
    "9b50ae1f239de9709af5f1db53629f8c" : "Ravi Kishor",
    "9d3bc5f160291389423da6ff52f5bc44" : "Luật Nguyễn",
    "9d69c86b66ca54565cd98aec6b6baaa3" : "Ahmed Elsobky",
    "9d729c1661a6d2474eb380131765eb6a" : "Abhishek Arya",
    "9d81009615f1e3b3b269eb78a4abd529" : "David Huang",
    "9d94a16c3719a01989b3eea98217cbfa" : "Dave Yesland",
    "9de234ea6d5568ef604dd3431af941e4" : "James Lee",
    "9e6d48cc96c5931585cbe2bfc66246b8" : "Aki Helin",
    "a01c8445e5c582a2465b1ff75ab6b4d9" : "Pedro Oliveira",
    "a086abd53dbd06525c4fa74864abaf3b" : "Max Van Amerongen",
    "a39d0e729280ee1e7d5c68d7d4d6c758" : "Ed McManus",
    "a480398726999a758b808aed02ef5e5e" : "Bui Dai Gia of VNG Corporation",
    "a63f14172a1a1763ebe352317a9c9156" : "Nassim Bouali",
    "a6802bce5af70f05dc216919c3455903" : "Axel '0vercl0k' Souchet",
    "a71a35e2a42f69964a986531483ab405" : "Jack Wrenn",
    "a72696a2089d2ea69143161018fa7c23" : "Zhong Zhaochen",
    "a8b84761cdafee6392f64aa115edc48b" : "Andrei Cristian Petcu",
    "a9173d90c2151988a643fee35abafb9f" : "Juho Nurminen",
    "a96e3717d23c56d2b7f4248881bc00ee" : "Young Min Kim (CompSec Lab at Seoul National University)",
    "a9e1d36bf363994f9a39353d1e384eab" : "guyio",
    "ab37a4ca424a143670adc9093c7086b9" : "Scott Bell",
    "ab52f2c4485ec82dcd6b5c36b845e6d5" : "James Kitchener",
    "ab54897026ce6f76bb9cbaf9a86a1fc8" : "Brian 'geeknik' Carpenter",
    "abb98d52131c2c03f832122ea7f9308b" : "Ismail Tasdelen",
    "ac6cb3312f13091a2b1ab69bb496057d" : "Rob Wu",
    "ad4e3024178ee23278381ebfbc54528f" : "Looben Yang",
    "adbee288a6f9cf15602fda47356d5175" : "Hany Ragab; Enrico Barberis; Herbert Bos; Cristiano Giuffrida",
    "af5f683612b2560ceeb75586a09f8525" : "Arvind",
    "b1448aa9184c61d226eb2d9901d6ae35" : "Krzysztof `vnd’ Katowicz-Kowalewski",
    "b16601816f98299912f0ea692e738c05" : "Anonymous",
    "b18940ae4a081c594022bcd56e7d949a" : "Ronald Crane",
    "b1a7c3c63dd184cfac07998a22977ccc" : "Harshit Mahendra",
    "b1a7d637734d5dad9b43136609c8f31f" : "Ronald Crane",
    "b1bce803655916f8687d2da2787a17c6" : "Clément Lavoillotte",
    "b295cad81920d9da67e35a981b6cb146" : "Ali Syarief",
    "b309975ebb9ea77a8021712f1fc0d908" : "Ezra Caltum",
    "b39f833e348ce97f571df4efc94ee88d" : "Kaizer Soze",
    "b55ff048a2450ef3b41abb9208d836d6" : "Diego Calleja",
    "b59e0dfdafc46b678d198dcd4e031f9d" : "Mateusz Sionkowski",
    "b5e1a616809a7f78f4b1709fa2cae1ac" : "Steven M Crane",
    "b6b492ddfce021c3a9cfe5b12b6c87c4" : "Kirin of Tencent Security Xuanwu Lab",
    "b6bf77041fb088d18af139e5eeafb4e9" : "Mohammed Mido from connectps.com",
    "b7b33547a73d2d2c7325f2c47406805f" : "Rakesh Mane",
    "b99b716bfc8db49cb857b8996fdc39f1" : "Arthur Edelstein",
    "ba257210862ef5ec1080279dd1bec6c4" : "Ken Okuyama",
    "bc1ce7e8b84b814c2eaf2566e4787881" : "Brian Smith",
    "bc9f571d28511fa67d79a20b81d1cd58" : "Kalel",
    "bca639214bd2b582e62763ecc183babd" : "Mike Cardwell",
    "bf39fa273742eda0011a11c8e5369e4b" : "Nicolas Grégoire of AGARRI",
    "c0b9ff5423b4fb9dc26b58576cd4497a" : "Toni Huttunen",
    "c0f5791dfa8c00979d4df44e3f25f884" : "Nicolas Trippar of Zimperium zLabs",
    "c154b0d9921cf1fdb945c0b446cc28e7" : "Anonymous",
    "c37b0aecd957572ef3e680cd7494b864" : "Felipe Caon",
    "c4d4cb75f73c13335d00b84a245e8543" : "Zijie Zhao",
    "c4e343b957ed04e78035e9f1e9b99290" : "Filipe Gomes",
    "c6c2040182defa796af2481e95d6bae1" : "Luan Herrera",
    "c78082d6d5aae54b54f48cecc0f97bed" : "Ms2ger of Igalia",
    "c8828ea7069b5acf239d313675eec592" : "R at Zero Day LLC",
    "ca5c500dbd892f7c06f6a7323220b2b6" : "Scott Zimmermann",
    "cb595bf0c104ec202ec824f464a2893f" : "zeb0x01",
    "cbbcaac86318f769b1f0b9237af85927" : "Yuji Tounai of Mitsui Bussan Secure Directions, Inc.",
    "cc25b3565b0e7f0a2bde8c4e8cecbbd5" : "Nikita Arykov - Security Architect at Pushwoosh Inc.",
    "cc84fd0104bbdf21f5ebfe017f47ba31" : "Quarkslab security engineer Francis Gabriel",
    "ccdbdf308c9f9efc0419c0acf961e3f8" : "Ciaran O'Reilly Ibañez",
    "cd0b10f0a5f56b3d04ea1a11cd009500" : "Aki Helin",
    "d18583e1a037264c5f33b734e9539c80" : "Nikita Moiseyev (mirror12k)",
    "d1eeb84022e9e6069fb8a0b36a898aee" : "Ai Ho",
    "d4c22b801d906fd988e857e28e0d4398" : "team509",
    "d53d5650291b09956d8d8fdc488e1d5b" : "Armin Ebert",
    "d6baf622b490bffd8c025e615ef460d2" : "crixer",
    "d76e336ed6fd7e9b0accbdb569c1ba12" : "Wietse Boonstra",
    "d77e4bf715af2d76c9c3ae565a21d40f" : "Gary Kwong",
    "d8edb7c1182dd0cc123dc47dcac28cee" : "Zhanjia Song",
    "d9147aad8edeb19e373570a6cb612b31" : "Rhys Enniks",
    "da370b9a066b1f80464a33801840e392" : "Team sutegoma2 - Japanese CTF team from AVTOKYO",
    "db59cb01d7b08db1a46c7f7834ff21fa" : "Iain Nicol of Iainteractive",
    "dc5e5b4455d895a163dcab8bc5e64a97" : "Jannis Rautenstrauch",
    "dd54e66b7d54126ca5647d1fd2492353" : "Craig Disselkoen",
    "ddab7e562afbe5ef1b37ad29ed33effe" : "Lukas Bernhard",
    "ddc9459ee44cb5366ad418f992aa47a3" : "Brandon Wieser of Cyber Sensei",
    "de93fee584390b928b2d12bd3d198fc0" : "0days Engineer",
    "dfce8e4c8278c73ffa3ace9344e86572" : "Antoine Delignat-Lavaud",
    "e064c5dd0686bd77a7bb7cc538547d8d" : "Jethro Beekman - Security Researcher at University of California - Berkeley",
    "e0a2ecaef5c7fa9bf90731771aac2e95" : "Marc Schoenefeld",
    "e0d23fbace24417f6260c181a10b0f3f" : "Tadj Youssouf",
    "e22e60864c27178d2469566dbcfb4e09" : "Michal Zalewski",
    "e2b442dbd6ddf0e28802b71bb4cf4376" : "Artur Osiński (Virtual_ManPL)",
    "e310574c3c35c503d99ef03885b7ef3a" : "Jay Gilbert",
    "e33752885775e4a274c6db31c995434b" : "Brian Carpenter of Geeknik Labs & Farm",
    "e4c8c633605b27018520a5a35934c884" : "Abiral Shrestha",
    "e4e810ec230795b44abbeb37d56b86e8" : "Abdulrahman Alqabandi of Microsoft Browser Vulnerability Research",
    "e5d2322aa516d90b7eb9a84d7b890938" : "Björn Ruytenberg",
    "e6f0d7b286f04f05d4ac4ae498bf2a32" : "Yaroslav Babin",
    "e750febf3b1e213b458f017fac835b27" : "Rh0",
    "e751036f55bbf501042162b16c883b4e" : "Nicolas Francois",
    "e7ae95aeff3bef60565d9a3bed3cfe46" : "Frederic Besler @ LAF INTL",
    "e875c787e17ec52abf8d743191dfdb57" : "Jun Kokatsu",
    "e8789d130dbfd97a970e074e8a61a206" : "Sohom Datta",
    "e88dc79e62596108bef66ec6d6d103fa" : "Wladimir Palant",
    "e8abc376c3254bcb714b250241b75011" : "insertscript",
    "e8df4fcdfce3352bfa7c8cc4f30cf852" : "Thomas Imbert",
    "e8f888d34d0dea54f388def803d7b4ab" : "Vladimir Dmitriev",
    "e977ff3c4f7a2bb8af350f3f0ead44b9" : "Dohyun Lee",
    "e98a60be99d8cad03ab7bda278934d00" : "Matheus Vrech",
    "ea3d4c453e3dcd5b7c3430a9d3b5cecf" : "Jann Horn",
    "ebb36808fc8bce5670bf7c40f8f79a07" : "Gunes Acar",
    "ec2382571a4578416a9eef5ec2e8a937" : "Nils",
    "ecbb5f9fa8cdf3d6339da4dc4bd08593" : "Thai \"thaidn\" Duong",
    "eeb20e34ecf97f18c09819a8189a917a" : "Masato Kinugawa",
    "f1bf10afb7f316883b9f79f73f72786a" : "Wen Xu of SSLab Georgia Tech",
    "f1d319a4f2eaf69d8489a741df1500d8" : "Francisco Alonso",
    "f2c90725c145fe10ebe35533891a1cbc" : "fatal0",
    "f38c860caa03d942e7572ce5cf38b18f" : "Jesus M Bermudez",
    "f42ea3053e8f3c5af81d1a33cb46e47e" : "Tsubasa Iinuma of Gehirn Inc.",
    "f45fcaee888e8eab311d5d869b48f6e4" : "Zach Hoffman",
    "f46a207798ca14de0287172ce8d47783" : "Linus Särud",
    "f5550452710913283cbf6db0976e2420" : "Konark Modi of Cliqz GmbH",
    "f5e9112010ab9bcfe26c912858f5ef10" : "zy9ard3",
    "f6628355de51d96186ee030cb936b04b" : "Pham Bao of VinCSS (Member of Vingroup)",
    "f6b2efbb344d0d64af70bcae3e3fc896" : "Mohammad Owais",
    "f72d4bcd18f0526f8faa4f781513c91f" : "Hafiizh",
    "f8266c7296c7f7d996e0040ad7843bf0" : "Robert Kugler",
    "f9a504736e3206f7ab9995d0dda25a63" : "Boopathi Senthilkumar",
    "fa9ffd84a1dd2951bcb0d7f8ebae5c84" : "Philip Okhonko",
    "fcf7ed040fa3561f7c7f23784de25ca6" : "R at Zero Day LLC",
    "fdfe2689e2668dcfe620ac81a741fde8" : "Harsh Banshpal",
    "fe7f319c61c0b44d4cb751afda4f4aeb" : "Gaurav Popalghat",
    "fea05bd1b815660051bf5d090eb4e522" : "Aral Yaman",
    "2e1575d6141ca69287e4f55ef6fec159" : "Jake Nicholson",
}
twitter_entries = {
    "b612ef16f16c1d0c74349356c0d2a6b7":"@justlikebono",
    "fb99b1caf1b9d2533e9c960aca901dd9":"@imnarendrabhati",
    "f8c612c2ea4acc003c3d14602343b148":"@eternalsakura13",
    "27526bd467c0513ae02efb663aadd58f":"@hyhy_100",
    "b35db3b4e14eb5d6b9719ce45ea3e45a":"@Az3z3l",
    "fefefe38f8c62015edb2b2e295eeaef6":"@duckhiem",
    "ad935713e8a3860ffac9edcd32707fd1":"@shaheenfazim",
    "d3010c7ab380ac4f0796a875d10b9266":"@ameenbasha111",
    "d5716b05696f59f850b9dad8ed0b0d43":"@revengerali",
    "0078828862f4973eece40d1be8510a0b":"@JayateerthaG",
    "061748177265860816977bb65cc0147a" : "@tomorrowisnew",
    "0c7f4b38ad0b504cfc48042e14564cc8" : "@pdjstone",
    "0cdb9b89f615c444f832e56c844e9e75" : "@ally_o_malley",
    "0eaafbf6f9aabe86a4b040ca50d9191a" : "@5hint0",
    "192e0a963474e27f64bf46f0ddde8268" : "@sebbity",
    "1cc583009e744f3a2e63c6ca0ca72c10" : "@RandomDhiraj",
    "1d239c1ff42a3e8e1c16c976020fd45f" : "@pkewisch",
    "1d2c94a3301ca111ff6bb161b3069a9c" : "@r3dpars3c",
    "20d9d642fb41b3732cf919a8eb256d2d" : "@Moblig_",
    "305a3f15dfabae7353bf675ca5b7a23d" : "@dnpushme",
    "3597ac4747474360b391a5e359948ca9" : "@netfuzzer",
    "359ee9ee2e4c35e5fa8097e48bd22c50" : "@vladimir_metnew",
    "38161e481b381a72de3c4804a292d4ab" : "@attekett",
    "3a98d1971bc7fab8d457063492a5a467" : "@rafaybaloch",
    "3c9e02bf1983fa620099841bb91ea3e0" : "@Black2Fan",
    "45b6c8b674aa0d31c437d7220d6a9f39" : "@reboot_ex",
    "480d732942ba3ecdedf961ce3fa9fc64" : "@nowaskyjr",
    "4a5880b0447f7349c9cbcff76045b3e6" : "@Bijoora",
    "4bf2165b96b2506a0ac2212b39fb78b1" : "@BloodyTangerine",
    "5080064df3a2c21441c9fb6cc3b5f816" : "@declme",
    "55f0363f4c86284fe5689525c5640c32" : "@dottor_morte",
    "59260d270baa2ce555fcf323c46d0c03" : "@arshadkazmi42",
    "64e04ce43d3007a00b51c63553c48efb" : "@p4fg",
    "7ec079736a63d226ce3b436b5f49b1d9" : "@bananabr",
    "81236113f95cd9d1591343e78fe204c5" : "@kid1ng",
    "815f2b92b84655f6a7e9e53ad10e78f4" : "@HarperMitchell",
    "82d7844614f152d6865e83d43f040a8b" : "@asanso",
    "8363fd9f9f37fbaf5d600e676bf3aec5" : "@agamimaulana",
    "89a138d6477c6a80b7f6c2e59a6c2fa4" : "@csanuragjain",
    "8aeb1a975c9c817eb6638851058fa5f2" : "@R3dpars3c",
    "9219e61c33ff1e2d14b670b865caffa8" : "@c0d3G33k",
    "92fcab73ced9591bffb1dbb8a4bf3ab4" : "https://twitter.com/tomorrowisnew",
    "9513cb577e79e3f73e3af0886ba27e70" : "@hjy79425575",
    "9667bad21b75845c367e1c91ea59d788" : "@jensvoid",
    "977f16d94af9ed0b87f3d10b766f4f07" : "@luotojesse",
    "9832ee85d3227243306872874b7157ea" : "whucjj",
    "9a653dd5b8871f60bd37caaa411d427a" : "@lazysaad",
    "9a7ef4ebc1fe8c5e7f59016564db97b4" : "@yossioren",
    "9d3bc5f160291389423da6ff52f5bc44" : "l4wio",
    "9d69c86b66ca54565cd98aec6b6baaa3" : "@0xsobky",
    "9de234ea6d5568ef604dd3431af941e4" : "@Windowsrcer",
    "a01c8445e5c582a2465b1ff75ab6b4d9" : "@kanytu",
    "a086abd53dbd06525c4fa74864abaf3b" : "@maxpl0it",
    "a6802bce5af70f05dc216919c3455903" : "@0vercl0k",
    "a9173d90c2151988a643fee35abafb9f" : "@jupenur",
    "a96e3717d23c56d2b7f4248881bc00ee" : "@ylemkimon",
    "af5f683612b2560ceeb75586a09f8525" : "@ar_arv1nd",
    "b1a7c3c63dd184cfac07998a22977ccc" : "@hm_harshit",
    "b1bce803655916f8687d2da2787a17c6" : "@clavoillotte",
    "b5e1a616809a7f78f4b1709fa2cae1ac" : "@stevenmcrane ",
    "b6b492ddfce021c3a9cfe5b12b6c87c4" : "@Pwnrin",
    "cb595bf0c104ec202ec824f464a2893f" : "https://www.linkedin.com/in/mehboob-shaikh-7791a3169",
    "cbbcaac86318f769b1f0b9237af85927" : "@yousukezan",
    "d1eeb84022e9e6069fb8a0b36a898aee" : "@j3ssiejjj",
    "dd54e66b7d54126ca5647d1fd2492353" : "@craigdissel",
    "e33752885775e4a274c6db31c995434b" : "@geeknik",
    "e4c8c633605b27018520a5a35934c884" : "@proabiral",
    "e4e810ec230795b44abbeb37d56b86e8" : "@qab",
    "e875c787e17ec52abf8d743191dfdb57" : "@shhnjk ",
    "e8abc376c3254bcb714b250241b75011" : "@insertscript",
    "e8df4fcdfce3352bfa7c8cc4f30cf852" : "@masthoon",
    "e977ff3c4f7a2bb8af350f3f0ead44b9" : "@l33d0hyun",
    "ecbb5f9fa8cdf3d6339da4dc4bd08593" : "@xorninja",
    "f1d319a4f2eaf69d8489a741df1500d8" : "@revskills",
    "f2c90725c145fe10ebe35533891a1cbc" : "@fatal0_",
    "f42ea3053e8f3c5af81d1a33cb46e47e" : "@llamakko_cafe",
    "f45fcaee888e8eab311d5d869b48f6e4" : "@zrhoffman",
    "f46a207798ca14de0287172ce8d47783" : "@_zulln",
    "f5550452710913283cbf6db0976e2420" : "@konarkmodi",
    "f5e9112010ab9bcfe26c912858f5ef10" : "@zy9ard3",
    "f6b2efbb344d0d64af70bcae3e3fc896" : "@_mohammadowais",
    "fa9ffd84a1dd2951bcb0d7f8ebae5c84" : "@sysmus28",
    "fe7f319c61c0b44d4cb751afda4f4aeb" : "@Gaurav_00000",
}
url_entries = {
    "455583182ba2e5c9b5a802e4e7da8bf9":"https://www.linkedin.com/in/bharat-adhikari-726337225",
    "f61a89bd95c4b84b6c6c79c988267950":"https://www.linkedin.com/in/jurrieovergoor/",
    "8b37f9bddc61920163d071f779926e25":"https://www.linkedin.com/in/rnando/",
    "b9a6307c3a098387557dab8537c59a70":"https://nomokazu.com/",
    "b9a6307c3a098387557dab8537c59a70":"https://nomokazu.com/",
    "9f059eb3b4eba569bba477ee0bc95350":"https://hackerone.com/lohigowda",
    "d95fb2b54e0b81565e15e10734bcfa94": "https://www.linkedin.com/in/orionjoshi/",
    "a021b107a1bbc624d7cd8435abf7a84f":"https://www.trivialsec.com/",
    "77c1bae6fa26a21ec93ff406fad19cc9":"https://www.linkedin.com/in/valeriyshevchenko/",
    "c7bf60509470e779de213f6fc17acb23":"https://www.linkedin.com/in/jimmy-bruneel-26a185108/",
    "544c25e9541e359d8daa1a88487b8541": "https://github.com/mbiesiad",
    "2e1575d6141ca69287e4f55ef6fec159" : "https://www.linkedin.com/in/dimedaughter/",
    "b295cad81920d9da67e35a981b6cb146" : "https://www.linkedin.com/in/mohammad-ali-syarief/",
    "918c93c03389817a230ce0b462634fde":"https://www.linkedin.com/in/manojkumar-j-7ba35b202/",
    "0d2e405bda8a025f471b28904acaa766":"https://grayduck.mn",
    "8222a267aa38fb97e9e1535d05383445":"https://danielv.com.br/",
    "f4ff034629bf0d9943a31a5437c3c1fe":"https://www.linkedin.com/in/chester-van-den-bogaard/",
    "0a01a5e6c30ea6e71f5ce82750529c8c" : "https://garethheyes.co.uk/",
    "0f14322cc49704ac5551ffe5835abd69" : "https://www.wayanadweb.com",
    "1248a90a05c7e3a46b97e6aceeb557ce" : "https://skylined.nl",
    "15acbd736229d79a8ed92e690164559c" : "https://www.nilsand.re/",
    "18844199a107c0665b6de05b47ce0340" : "https://www.tattiebogle.net/",
    "192aac4383d85b9acf43554612c6b461" : "https://facebook.com/vitaly.nevgen",
    "1c04ef59bd60189ce09cfca187225e75" : "https://www.linkedin.com/in/mohammedfayez",
    "1d6eb1c6e8a177847eca74cad00fc301" : "https://tecnoblog.guru/",
    "1e304bfde59dcfb0131e21e913281614" : "https://gubello.me",
    "1e7c9dd1924cf9763c2507c94be341c2" : "https://zulln.se/",
    "1ffe73fabf298c651b7a8c750de530d2" : "https://fukusa.nl",
    "21c712eaa986e0ae3e135fe689259684" : "http://dracos.co.uk/",
    "2841918025ae79884c3eac763a453b76" : "https://koelner-pc-hilfe.de",
    "2920656b8c8d785f7ccecab735a106a8" : "https://skylined.nl",
    "2bb8b9860ce62f3fbc9e7eec1a9d5ed0" : "https://maone.net",
    "3c098d6ead472177028bde34acacb5f1" : "http://www.mbsd.jp/",
    "3f3fae9ad20da4c5655ceda765563e6c" : "https://www.vulnerability-lab.com",
    "3fd6daa83cd0821ca8584ad0c74e34d1" : "https://github.com/zhchbin",
    "4209a557d472db164e9394a5d8ed7d6b" : "https://www.linkedin.com/in/joaxcar",
    "47403ba3cf9bcae0874a07f299f643f0" : "https://struct.github.io",
    "4a5880b0447f7349c9cbcff76045b3e6" : "https://facebook.com/Bijoora",
    "4b7fd0d6665950db856bc5e22846f719" : "http://www.trapkit.de/",
    "4cb38b42bb161ce775b5e7f91d260d3f" : "https://www.linkedin.com/in/daniel-maksimovic-73537882",
    "654445704639346f526d1ef514d08fd7" : "https://acrossecurity.com/",
    "6c5314d59c2e56564b18fe6199305fd3" : "https://hackerone.com/abdellah29",
    "740b81a60bd25700b839f63e8d937796" : "http://linkedin.com/in/karthik-kumar-reddy-3b10b4128",
    "755ae0590425c02b3c203036df1a7e1e" : "http://www.securesoftware.nl",
    "763dcd98e7052a2d6ccebdc6cddec7a3" : "https://www.linkedin.com/in/anhnt1337/",
    "77af16493363287bc9b6ed99548293d7" : "https://www.aryansinha.com/",
    "77b1dc2043055d86d9e81b5035efe29f" : "https://www.linkedin.com/in/sourc7/",
    "7aba285c7e4b7f41df3dae6f4becd2a9" : "https://bishopfox.com/",
    "7bd9d5640cb0f0dd5e59ccd7b02a0349" : "https://krashconsulting.com",
    "7e1e41ab0cd46a4a32c82def7b840a6d" : "http://cure53.de/",
    "7edb6115b239d771b9689857b9e95568" : "https://hboeck.de/",
    "80e0b8cb2a22f8b9669d2ca1968ce898" : "https://ewirch.github.io/",
    "817bd7bdff0d93ccdada8707b5278a08" : "https://axen-cyber.com",
    "8314603008777278fd70c0b9b4f01645" : "http://www.adambarth.com/",
    "9228cdb27944fb384f1305d2d0c350b8" : "https://facebook.com/tkrawool",
    "940a6b73a009cb437c868e8e3c0dc779" : "https://www.linkedin.com/in/aarizkhan",
    "95663a4cc4fa467fdd949b16b6e03760" : "https://labs.f-secure.com/",
    "9684d8c1d955335cb2ba23ddab9769ac" : "http://www.kerneronsec.com/",
    "9b50ae1f239de9709af5f1db53629f8c" : "https://bughunter.withgoogle.com/profile/3c96630c-9112-4ddb-a029-df2bb893c6c3",
    "9d81009615f1e3b3b269eb78a4abd529" : "https://www.linshunghuang.com/",
    "9e6d48cc96c5931585cbe2bfc66246b8" : "https://haltp.org",
    "a480398726999a758b808aed02ef5e5e" : "https://www.linkedin.com/in/yabeow/",
    "a63f14172a1a1763ebe352317a9c9156" : "https://hackerone.com/derision",
    "a71a35e2a42f69964a986531483ab405" : "https://jswrenn.com/",
    "abb98d52131c2c03f832122ea7f9308b" : "https://www.linkedin.com/in/ismailtasdelen/",
    "ac6cb3312f13091a2b1ab69bb496057d" : "https://robwu.nl",
    "b1a7d637734d5dad9b43136609c8f31f" : "https://www.zippenhop.com/",
    "b59e0dfdafc46b678d198dcd4e031f9d" : "https://www.youtube.com/channel/UCUbCnVzyWy4087CAxvL-cbA",
    "b7b33547a73d2d2c7325f2c47406805f" : "https://rakeshmane.com/",
    "bc1ce7e8b84b814c2eaf2566e4787881" : "https://briansmith.org/",
    "bca639214bd2b582e62763ecc183babd" : "https://www.grepular.com/",
    "bf39fa273742eda0011a11c8e5369e4b" : "http://www.agarri.fr/",
    "c78082d6d5aae54b54f48cecc0f97bed" : "https://twitter.com/Ms2ger",
    "ca5c500dbd892f7c06f6a7323220b2b6" : "https://github.com/sczi",
    "ccdbdf308c9f9efc0419c0acf961e3f8" : "https://oreilly.cat/",
    "d53d5650291b09956d8d8fdc488e1d5b" : "https://rawsec.net/",
    "d76e336ed6fd7e9b0accbdb569c1ba12" : "https://www.linkedin.com/in/wietse-boonstra",
    "d77e4bf715af2d76c9c3ae565a21d40f" : "https://www.ygitsoftware.com/",
    "da370b9a066b1f80464a33801840e392" : "http://ja.avtokyo.org/projects/sutegoma2",
    "db59cb01d7b08db1a46c7f7834ff21fa" : "https://www.iainnicol.com/",
    "ddc9459ee44cb5366ad418f992aa47a3" : "http://www.cybersensei.io",
    "de93fee584390b928b2d12bd3d198fc0" : "http://0days.engineer",
    "dfce8e4c8278c73ffa3ace9344e86572" : "https://antoine.delignat-lavaud.fr",
    "e064c5dd0686bd77a7bb7cc538547d8d" : "https://jbeekman.nl/",
    "e0a2ecaef5c7fa9bf90731771aac2e95" : "https://de.linkedin.com/in/marcschoenefeld",
    "e22e60864c27178d2469566dbcfb4e09" : "http://lcamtuf.coredump.cx/",
    "e2b442dbd6ddf0e28802b71bb4cf4376" : "https://bugzilla.mozilla.org/user_profile?user_id=342842",
    "e5d2322aa516d90b7eb9a84d7b890938" : "https://bjornweb.nl/",
    "e6f0d7b286f04f05d4ac4ae498bf2a32" : "https://linkedin.com/in/yarbabin",
    "f72d4bcd18f0526f8faa4f781513c91f" : "https://www.linkedin.com/in/hafiizh-7aa6bb31/",
    "f8266c7296c7f7d996e0040ad7843bf0" : "https://www.s3cur3.it/",
    "fdfe2689e2668dcfe620ac81a741fde8" : "https://www.linkedin.com/in/harshbanshpal/",
}



client_products = [
    "Core",
    "External Software Affecting Firefox",
    "Firefox Build System",
    "GeckoView",
    "Firefox",
    "Firefox for Android",
    "Firefox for iOS",
    "Mozilla VPN",
    "Fenix",
    "Focus",
    "Focus-iOS",
    "Lockwise",
    "MailNews Core",
    "NSPR",
    "NSS",
    "Pocket",
    "Thunderbird",
    "Toolkit",
    "WebExtensions",
    "Web Compatibility",
    "DevTools",
    "Calendar",
    "Web Compatibility",
]
web_products = ["Cloud Services",
    "Data Platform and Tools",
    ]

def is_client_bug(bug):
    # We have a limited number of for-certain web products
    # but for the most part we rely on !client
    if bug['product'] in web_products:
        return False

    if bug['product'] == "Testing" and bug['component'] == "geckodriver":
        return True

    # A lot of Pocket bugs are web bugs, but some are client
    if bug['product'] == "Pocket":
        return not bug['component'] == "getpocket.com"

    if bug['classification'] == "Client Software":
        if bug['product'] == "Emerging Markets" and bug['component'] in ["Security:  Firefox Lite"]:
            return True

        if bug['product'] == "Web Compatibility" and bug['component'] == "Tooling & Investigations":
            return True

        if bug['product'] not in client_products:
            # this is an edge case we should validate and improve
            raise Exception("Bug: {3} Classification: '{0}' Product: '{1}' Component: '{2}' is not considered a client bug, please confirm.".format(bug['classification'], bug['product'], bug['component'], bug["id"]))
    
    if bug['product'] == 'Firefox' and bug['component'] in ["Firefox Monitor"]:
        return False

    return bug['product'] in client_products

# Set up the requests retry/backoff strategy
retry_strategy = Retry(
    total=5,
    status_forcelist=[429, 500, 502, 503, 504],
    allowed_methods=["HEAD", "GET", "OPTIONS"],
    backoff_factor=2
)
adapter = HTTPAdapter(max_retries=retry_strategy)
http = requests.Session()
http.mount("https://", adapter)
http.mount("http://", adapter)

def main():
    args = command_line()

    # Do this first so we error immediately if the file isn't there.
    with open(os.path.abspath(args.output), 'r') as f:
        file_data = f.read()
        f.close()

    hmackey = get_hmac_key(args.apikey)
    debuglogfilename = 'debuglog.' + str(int(time.time())) + '.log'
    debuglog = open(debuglogfilename, 'w')

    print("Okay, we're going to start. Have you assigned hof+ to the eligible bugs with bounty- and CVEs?")
    print("The link for those for you to review is:")
    print("   ", CVE_REVIEW.replace("YEAR_REPLACEME", args.year))
    print("If you forgot to do this, kill the script, do it, and start it again.")
    print("I'm logging to", debuglogfilename)

    bugs = gather_bug_list(args.apikey)
    hof_entries = []

    (begin_date, end_date) = define_dates(args.quarter, args.year)
    print("Generating Bug Data from " + str(len(bugs["bugs"])) + " bugs")
    num_processed = 0
    for bug in bugs["bugs"]:
        bugid = str(bug["id"])
        debuglog.write(bugid + ",")
        debuglog.write(bug['classification'] + ",")
        debuglog.write(bug['product'] + ",")
        debuglog.write(bug['component'] + ",")

        num_processed += 1

        #if num_processed % 100 == 0:
        print("Processed", num_processed, "of", len(bugs["bugs"]), "currently on", bugid)
        if args.client and not is_client_bug(bug):
            debuglog.write("wrong product: " + bug['product'] + "\n")
            continue
        elif args.web and is_client_bug(bug):
            debuglog.write("wrong product: " + bug['product'] + "\n")
            continue


        data ={'bugid':bugid}

        # ==========================================================================================
        # Look for the bug bounty attachment first
        attachment_url = BASE_URL + 'bug/' + bugid + '/attachment'
        try:
            attachments = http.get(attachment_url, headers=HEADERS, params={'api_key' : args.apikey}).json()['bugs'][bugid]
        except Exception as e:
            print ("Error in " + bugid)
            print (e)
            continue

        # attachment_breakout[0] = email
        # attachment_breakout[1] = paid
        # attachment_breakout[2] = reported date
        # attachment_breakout[3] = fixed date
        # attachment_breakout[4] = awareded date
        # attachment_breakout[5] = publish (true/false)
        # attachment_breakout[6] = credit
        # attachment_breakout[7] = twitter
        # attachment_breakout[8] = url
        
        foundAttachment = None
        for attachment in attachments:
            if attachment['file_name'] == 'bugbounty.data' and attachment['is_private'] == 1:
                if foundAttachment and bugid not in ["913805"]:
                    raise Exception("Two bug bounty attachments were found for " + bugid)
                foundAttachment = attachment

        if foundAttachment:
            # Old bugs with weird formats
            if bugid in ['1074642']:
                continue

            try:
                attachment = foundAttachment

                attachment_breakout = [x.strip() for x in attachment['description'].split(',')]
                data["email"] = attachment_breakout[0]
                data["email_hmac"] = hmac_email(hmackey, attachment_breakout[0])
                data["date_raw"] = attachment_breakout[4] or attachment_breakout[3] or attachment_breakout[2]
                data["date"] = datetime.strptime(data["date_raw"], '%Y-%m-%d')
                
                debuglog.write("bounty+," + data["date_raw"] + "," + data["email"] + "," + data["email_hmac"] + ",")
                
                if begin_date < data["date"] < end_date:
                    if "@mozilla.com" in data["email"] and mozilla_email_was_employed(data["email"], data["date"]):
                        debuglog.write("Mozilla Employee in a Bug Bounty Attachment??\n")
                        # Don't add Mozilla employees filing bugs under their work email to the HOF
                        continue

                    # print("Generating Data For Bug %s - %s" % (bugid, data["email"]))
                    numFields = len(attachment_breakout)

                    if not bool(attachment_breakout[5]):
                        debuglog.write("Publish was blank,")
                    elif "no" == attachment_breakout[5].lower() or "false" == attachment_breakout[5].lower():
                        debuglog.write("Do Not Publish\n")
                        continue
                    else:
                        debuglog.write("publish,")

                    data["name"] = ""
                    if numFields > 6 and attachment_breakout[6]:
                        data["name"] = attachment_breakout[6]

                        if "[paid]" in data["name"]:
                            data["name"] = ""
                        elif "no response" in data["name"]:
                            data["name"] = ""
                        elif data["name"][0] == '"' and data["name"][-1] == '"':
                            data["name"] = data["name"][1:-1]
                    
                        if data["name"] and data["email_hmac"] not in credit_entries and \
                           check_add_credit_to_script(data["email"], data["name"]):
                            add_credit_to_script(hmackey, data["email"], data["name"])

                    if not data["name"] and data["email_hmac"] in credit_entries:
                        data["name"] = credit_entries[data["email_hmac"]]
                    elif not data["name"]:
                        user_url = BASE_URL + 'user?names=' + data["email"]
                        try:
                            user_response = http.get(user_url, headers=HEADERS)
                            user_response_data = user_response.json()
                        except requests.exceptions.RequestException as e:
                            print("Could not get user data for " + user_url)
                            print(e)
                            sys.exit(1)

                        if user_response.status_code == 200 and user_response_data['users'][0]["real_name"]:
                            data["name"] = user_response_data['users'][0]["real_name"]
                        else:
                            data["name"] = data["email"].split('@', 1)[0]
                            print("Had to use fallback name for", bugid, data["email"], data["name"])
                    
                    data["quarter-string"] = data["date_raw"][0:4] + month_to_quarter(data["date_raw"][5:7])

                    if data["email_hmac"] in twitter_entries:
                        data["twitter"] = twitter_entries[data["email_hmac"]]
                    elif numFields > 7 and attachment_breakout[7]:
                        data["twitter"] = attachment_breakout[7]
                        add_twitter_to_script(hmackey, data["email"], data["twitter"])

                    if data["email_hmac"] in url_entries:
                        data["url"] = url_entries[data["email_hmac"]]
                    elif numFields > 8 and attachment_breakout[8]:
                        data["url"] = attachment_breakout[8]
                        add_url_to_script(hmackey, data["email"], data["url"])
                    
                    if not "url" in data and "twitter" in data:
                        data["url"] = "https://twitter.com/" + data["twitter"]

                    hof_entries.append(data)
                    debuglog.write(data["name"] + "," + (data["url"] if 'url' in data else "") + "\n")
                    continue # Go to next bug
                else:
                    debuglog.write("Date wasn't in range\n")
                    continue
            except:
                debuglog.write("Printed Exception\n")
                import traceback
                print("--------------------------------------------------------")
                print("Could not process %s" % bugid)
                print("Attachment field: %s" % attachment['description'])
                print("Split fields: %s" % attachment['description'].split(','))
                print(traceback.format_exc())
                print("--------------------------------------------------------")
                continue

        # ==========================================================================================
        # If we didn't find a bounty attachment, then it's a Hall of Fame Entry
        if 'cf_last_resolved' not in bug or not bug['cf_last_resolved']:
            # No resolved date, so look for a flag date
            hof_date = None
            history_url = BASE_URL + 'bug/' + bugid + '/history'
            try:
                history = http.get(history_url, headers=HEADERS, params={'api_key' : args.apikey}).json()
                for h in history['bugs'][0]['history'][::-1]:
                    for c in h['changes']:
                        if c['field_name'] == "flagtypes.name" and "sec-bounty-hof+" in c['added']:
                            hof_date = h['when'].split("T")[0]
                if not hof_date:
                    raise Exception("Could not find a bounty+ date")
                data["date_raw"] = hof_date.split("T")[0]
            except Exception as e:
                print ("Error in " + bugid)
                print (e)
                continue
        else:
            # Normal case
            data["date_raw"] = bug['cf_last_resolved'].split("T")[0]
        data["date"] = datetime.strptime(data["date_raw"], '%Y-%m-%d')
        debuglog.write("bounty-," + data["date_raw"] + ",")

        if begin_date < data["date"] < end_date:
            data["name"] = ""
            data["email"] = bug['creator_detail']['email']
            data["email_hmac"] = hmac_email(hmackey, data["email"])
            debuglog.write(data["email"] + "," + data["email_hmac"] + ",")

            if "@mozilla.com" in data["email"] and mozilla_email_was_employed(data["email"], data["date"]):
                debuglog.write("Mozilla Employee??\n")
                # Don't add Mozilla employees filing bugs under their work email to the HOF
                continue
            
            # print("Generating Data For Bug %s - %s" % (bugid, data["email"]))
            if data["email_hmac"] in credit_entries:
                data["name"] = credit_entries[data["email_hmac"]]
            else:
                user_url = BASE_URL + 'user?names=' + data["email"]
                try:
                    user_response = http.get(user_url, headers=HEADERS)
                    user_response_data = user_response.json()
                except requests.exceptions.RequestException as e:
                    print("Could not get user data for " + user_url)
                    print(e)
                    sys.exit(1)

                if user_response.status_code == 200 and user_response_data['users'][0]["real_name"]:
                    data["name"] = user_response_data['users'][0]["real_name"]
                else:
                    data["name"] = data["email"].split('@', 1)[0]
                    print("Had to use fallback name:", bugid, data["email"], data["name"])

            data["quarter-string"] = data["date_raw"][0:4] + month_to_quarter(data["date_raw"][5:7])

            if data["email_hmac"] in twitter_entries:
                data["twitter"] = twitter_entries[data["email_hmac"]]

            if data["email_hmac"] in url_entries:
                data["url"] = url_entries[data["email_hmac"]]
            
            if not "url" in data and "twitter" in data:
                data["url"] = "https://twitter.com/" + data["twitter"]

            hof_entries.append(data)
            debuglog.write(data["name"] + "," + (data["url"] if 'url' in data else "") + "\n")
            continue # Go to next bug (although we're already at the end of the loop.)
        else:
            debuglog.write("Date wasn't in range\n")
            continue

    def soryByDate(val):
        return val["date"]

    hof_entries.sort(key=soryByDate, reverse=True)

    oneEntryPerQuarter = set()

    hof_output = ""
    hof_bugzilla_queryarg = ""
    for data in hof_entries:
        try:
            hof_bugzilla_queryarg += data['bugid'] + ","
            thisData = data["name"] + " " + data["quarter-string"]
            if thisData in oneEntryPerQuarter:
                continue

            oneEntryPerQuarter.add(thisData)
            hof_output = hof_output + "- name: {}\n".format(data["name"])
            hof_output = hof_output + "  date: {}\n".format(data["date_raw"])

            if "twitter" in data:
                hof_output = hof_output + "  twitter: \"{}\"\n".format(data["twitter"])
            if "url" in data:
                hof_output = hof_output + "  url: {}\n".format(data["url"])
        except Exception as e:
            print("Could not write hof entry for ", data["name"])

    final_output = file_data[:6] +'\n' + hof_output.rstrip() + file_data[6:]

    with open(os.path.abspath(args.output), 'w') as output_file:
        output_file.write(final_output)

    print("I logged to", debuglogfilename)
    print("Here is a bugzilla query showing all the bugs I processed for this quarter. Please note that a reporter _may_ have multiple bugs, so don't remove them from the HOF for a misplaced bug without double checking.")
    print("https://bugzilla.mozilla.org/buglist.cgi?quicksearch={0}".format(hof_bugzilla_queryarg))

def define_dates(quarter, year):
    if quarter == "doitall":
        begin_date = datetime.strptime("{}-01-01" .format(2000), '%Y-%m-%d')
        end_date = datetime.strptime("{}-12-31" .format(2019), '%Y-%m-%d')
    elif int(quarter) == 1:
        begin_date = datetime.strptime("{}-01-01" .format(year), '%Y-%m-%d')
        end_date = datetime.strptime("{}-03-31" .format(year), '%Y-%m-%d')
    elif int(quarter) == 2:
        begin_date = datetime.strptime("{}-04-01" .format(year), '%Y-%m-%d')
        end_date = datetime.strptime("{}-06-30" .format(year), '%Y-%m-%d')
    elif int(quarter) == 3:
        begin_date = datetime.strptime("{}-07-01" .format(year), '%Y-%m-%d')
        end_date = datetime.strptime("{}-09-30" .format(year), '%Y-%m-%d')
    elif int(quarter) == 4:
        begin_date = datetime.strptime("{}-10-01" .format(year), '%Y-%m-%d')
        end_date = datetime.strptime("{}-12-31" .format(year), '%Y-%m-%d')
    else:
        print("not a valid quarter")
        exit(1)
    return(begin_date, end_date)

def month_to_quarter(month):
    if int(month) <= 3:
        return str(1)
    elif int(month) <= 6:
        return str(2)
    elif int(month) <= 9:
        return str(3)
    else:
        return str(4)


def command_line():
    parser = argparse.ArgumentParser()
    parser.add_argument("-a", "--apikey", help="Bugzila API key")
    parser.add_argument("-f", "--output", help="YAML file")
    parser.add_argument("-y", "--year", help="year")
    parser.add_argument("-q", "--quarter", help="quarter as digit")
    parser.add_argument("-w", "--web", help="Process Web Bugs", action='store_true')
    parser.add_argument("-c", "--client", help="Process Client Bugs", action='store_true')
    parser.add_argument("--sort-credit-entries", help="Do not update Hall of Fame, just sort the credit entries and output them", action='store_true')
    parser.add_argument("--hmac", help="hmac an email address")
    args = parser.parse_args()

    if args.sort_credit_entries:
        print("credit_entries = {")
        for k in sorted(credit_entries):
            print("    \"" + k + "\" : \"" + credit_entries[k].replace("\"", "\\\"") + "\",")
        print("}")

        print("twitter_entries = {")
        for k in sorted(twitter_entries):
            print("    \"" + k + "\" : \"" + twitter_entries[k].replace("\"", "\\\"") + "\",")
        print("}")

        print("url_entries = {")
        for k in sorted(url_entries):
            print("    \"" + k + "\" : \"" + url_entries[k].replace("\"", "\\\"") + "\",")
        print("}")
        sys.exit(0)
    elif args.hmac and args.apikey:
        print(hmac_email(get_hmac_key(args.apikey), args.hmac))
        sys.exit(0)
    elif args.hmac:
        print("If you request hmac you must also supply --apikey")
        sys.exit(1)
    else:
        if not args.apikey or not args.output or not args.year or not args.quarter:
            parser.print_help()
            sys.exit(1)
        if not args.client and not args.web:
            print("Either --web or --client is required.")
            sys.exit(1)

    return args

def check_add_credit_to_script(email, credit):
    if " and " in credit:
        # Do not by default, add double-credits as a mapping.
        return False
    if email == "replace@replace.com":
        # This was an old field used to indicate we were filing a bug for someone
        return False
    if "@mozilla.com" in email:
        # Do not add mozilla emails to script, we probably filed them for someone else.
        return False
    if credit.strip()[0] == "@":
        raise Exception("It looks like a Twitter handle is in the credit field.")
    return True

def mozilla_email_was_employed(email, date):
    pre_employment_data = {
        'jdemooij@mozilla.com' : datetime(year=2011, month=11, day=1),
        'choller@mozilla.com' : datetime(year=2011, month=8, day=1)
    }
    if email not in pre_employment_data:
        return True
    return date > pre_employment_data[email]

def hmac_email(hmackey, email):
    return hmac.new(hmackey, email.strip().lower().encode(), digestmod='md5').hexdigest()

def add_credit_to_script(hmackey, email, credit):
    string_to_add = '"' + hmac_email(hmackey, email) + '":"' + credit + '",'
    with open(__file__, 'r', encoding="utf-8") as in_script:
        script_data = in_script.read()

    index = script_data.find('credit_entries = {') + 18

    final_output = script_data[:index] +'\n' + "    " + string_to_add + script_data[index:]

    with open(__file__, 'w', encoding="utf-8") as out_script:
        out_script.write(final_output)

def add_twitter_to_script(hmackey, email, twitter):
    string_to_add = '"' + hmac_email(hmackey, email) + '":"' + twitter + '",'
    with open(__file__, 'r', encoding="utf-8") as in_script:
        script_data = in_script.read()

    index = script_data.find('twitter_entries = {') + 19

    final_output = script_data[:index] +'\n' + "    " + string_to_add + script_data[index:]

    with open(__file__, 'w', encoding="utf-8") as out_script:
        out_script.write(final_output)

def add_url_to_script(hmackey, email, url):
    string_to_add = '"' + hmac_email(hmackey, email) + '":"' + url + '",'
    with open(__file__, 'r', encoding="utf-8") as in_script:
        script_data = in_script.read()

    index = script_data.find('url_entries = {') + 15

    final_output = script_data[:index] +'\n' + "    " + string_to_add + script_data[index:]

    with open(__file__, 'w', encoding="utf-8") as out_script:
        out_script.write(final_output)

def gather_bug_list(apikey):
    try:
        bugs = http.get(search_url, headers=HEADERS, params={'api_key':apikey, 'include_fields': 'id, classification, product, component, cf_last_resolved, creator, creation_time'}).json()
    except requests.exceptions.RequestException as e:
        print(e)
        sys.exit(1)
    return bugs

def get_hmac_key(apikey):
    key = ""
    try:
        response = http.get("https://bugzilla.mozilla.org/rest/bug/attachment/" + str(HMAC_KEY_ATTACHMENT_ID), headers=HEADERS, params={'api_key':apikey}).json()
        return base64.b64decode(response['attachments'][str(HMAC_KEY_ATTACHMENT_ID)]['data'])
    except requests.exceptions.RequestException as e:
        print(e)
        sys.exit(1)
    return key

if __name__ == '__main__':
    main()