Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
a390bf5644 | ||
|
|
92738b16a4 | ||
|
|
361b47bea8 | ||
|
|
616116d9a2 | ||
|
|
ecef89c4f9 | ||
|
|
818166f607 | ||
|
|
c50eae4dc4 | ||
|
|
3c8e161f82 | ||
|
|
3b39a0c244 | ||
|
|
42a4d6d037 | ||
|
|
c8eec3de4a | ||
|
|
28234dac76 | ||
|
|
bb46582e74 | ||
|
|
33086f2f78 | ||
|
|
a3be157768 | ||
|
|
8703982fe0 | ||
|
|
c90d90c07c | ||
|
|
87e7ce3741 | ||
|
|
ba6d6f0f49 | ||
|
|
99fd136a0d | ||
|
|
b7063bc517 | ||
|
|
b031377f83 | ||
|
|
b6e1f630f5 | ||
|
|
08b452b798 | ||
|
|
667b44430d | ||
|
|
f0f7c81fe6 | ||
|
|
e1bbcbd2a0 | ||
|
|
0879c1e1eb | ||
|
|
496bd6fb86 | ||
|
|
66dbb9c1d7 | ||
|
|
1eafce6f7c | ||
|
|
39ca494295 | ||
|
|
7db3c60ed8 | ||
|
|
9023c0ee9f | ||
|
|
03ebc806fd | ||
|
|
9cff8c45a3 | ||
|
|
3bdaf3cd1d | ||
|
|
09ec368c1a | ||
|
|
35e70e2fe6 | ||
|
|
7bc9028a21 | ||
|
|
afa04ea941 | ||
|
|
58a6470fd0 | ||
|
|
1213c5d3f1 | ||
|
|
a800cf3a7d | ||
|
|
5ce908d705 | ||
|
|
3e5e264b0b | ||
|
|
3c889db3a5 | ||
|
|
bb9a19cc71 | ||
|
|
b34db874ad | ||
|
|
3da98259e4 | ||
|
|
2735722db3 | ||
|
|
13a64aad60 | ||
|
|
52578f36b4 | ||
|
|
5da4011ead | ||
|
|
090ef2e39e | ||
|
|
6a5902ad60 | ||
|
|
a9a94ffa30 | ||
|
|
0cff91ba67 | ||
|
|
7893a93545 | ||
|
|
ea2dfec47e | ||
|
|
3fb5a3841b | ||
|
|
ca3b280217 | ||
|
|
66c43d7b0f | ||
|
|
b2abff1b30 | ||
|
|
65bb9efa0d | ||
|
|
bf60fc83d5 | ||
|
|
b99cc79406 | ||
|
|
a6b8982d5b | ||
|
|
df3c0b968d | ||
|
|
001061f639 | ||
|
|
18d66608aa | ||
|
|
14eece1b52 | ||
|
|
4ac2f8a108 | ||
|
|
6ff06d3031 | ||
|
|
b95054b2c9 | ||
|
|
e856d68bf6 | ||
|
|
b450c1e70a | ||
|
|
40a8016b52 | ||
|
|
2b33faed53 | ||
|
|
96633f3306 | ||
|
|
de040a8f05 | ||
|
|
116978b29b | ||
|
|
7525e8a5ba | ||
|
|
e7294b7d61 | ||
|
|
d606a12b47 | ||
|
|
ecfb8f5800 | ||
|
|
0dbb85df89 | ||
|
|
ac47c41d35 | ||
|
|
01a12b15f3 | ||
|
|
2a94432724 | ||
|
|
041f3447c5 | ||
|
|
46d0e22e1e | ||
|
|
178687e563 | ||
|
|
8775887aee | ||
|
|
ef0d0d8880 | ||
|
|
495da62f9b | ||
|
|
8b897adb20 | ||
|
|
94a001e16a | ||
|
|
ff52e7bd24 | ||
|
|
5ce24d80c5 | ||
|
|
911f68f5e8 | ||
|
|
5b917094cc | ||
|
|
0504b7d214 | ||
|
|
aae5c70b57 | ||
|
|
5c17693f4d | ||
|
|
9e2c7e2e4e | ||
|
|
bfe2018b1d | ||
|
|
aea03928e0 | ||
|
|
ddcdf06451 | ||
|
|
ae7636b358 | ||
|
|
45c08e0290 | ||
|
|
2aa48b4ff5 | ||
|
|
0859d35b3a | ||
|
|
965ce47333 | ||
|
|
2f0b3958aa | ||
|
|
da60cd1844 |
No files matched your search
@@ -113,3 +113,10 @@ venv.bak/
|
||||
*.model
|
||||
*.csv
|
||||
*.txt
|
||||
results.html
|
||||
!requirements.txt
|
||||
!requirements-gpu.txt
|
||||
!tests/models/*
|
||||
!tests/data/*
|
||||
!docs/*
|
||||
logs/*
|
||||
@@ -0,0 +1,109 @@
|
||||
# Eyeballer
|
||||
|
||||

|
||||
|
||||
|
||||
Give those screenshots of yours a quick eyeballing.
|
||||
|
||||
Eyeballer is meant for large-scope network penetration tests where you need to find "interesting" targets from a huge set of web-based hosts. Go ahead and use your favorite screenshotting tool like normal (EyeWitness or GoWitness) and then run them through Eyeballer to tell you what's likely to contain vulnerabilities, and what isn't.
|
||||
|
||||
|
||||
### Example Labels
|
||||
|
||||
| Old-Looking Sites | Login Pages |
|
||||
| ------ |:-----:|
|
||||
|  |  |
|
||||
|
||||
| Webapp | Custom 404's |
|
||||
| ------ |:-----:|
|
||||
|  |  |
|
||||
|
||||
| Parked Domains |
|
||||
| ------ |
|
||||
|  |
|
||||
|
||||
## What the Labels Mean
|
||||
|
||||
**Old-Looking Sites**
|
||||
Blocky frames, broken CSS, that certain "je ne sais quoi" of a website that looks like it was designed in the early 2000's. You know it when you see it. Old websites aren't just ugly, they're also typically super vulnerable. When you're looking to hack into something, these websites are a gold mine.
|
||||
|
||||
**Login Pages**
|
||||
Login pages are valuable to pen testing, they indicate that there's additional functionality you don't currently have access to. It also means there's a simple follow-up process of credential enumeration attacks. You might think that you can set a simple heuristic to find login pages, but in practice it's really hard. Modern sites don't just use a simple input tag we can grep for.
|
||||
|
||||
**Webapp**
|
||||
This tells you that there is a larger group of pages and functionality available here that can serve as surface area to attack. This is in contrast to a simple login page, with no other functionality. Or a default IIS landing page which has no other functionality. This label should indicate to you that there is a web application here to attack.
|
||||
|
||||
**Custom 404**
|
||||
Modern sites love to have cutesy custom 404 pages with pictures of broken robots or sad looking dogs. Unfortunately, they also love to return HTTP 200 response codes while they do it. More often, the "404" page doesn't even contain the text "404" in it. These pages are typically uninteresting, despite having a lot going on visually, and Eyeballer can help you sift them out.
|
||||
|
||||
**Parked Domains**
|
||||
Parked domains are websites that look real, but aren't valid attack surface. They're stand-in pages, usually devoid of any real functionality, consist almost entirely of ads, and are usually not run by our actual target. It's what you get when the domain specified is wrong or lapsed. Finding these pages and removing them from scope is really valuable over time.
|
||||
|
||||
## Setup
|
||||
|
||||
Download required packages on pip:
|
||||
```
|
||||
sudo pip3 install -r requirements.txt
|
||||
```
|
||||
|
||||
Or if you want GPU support:
|
||||
```
|
||||
sudo pip3 install -r requirements-gpu.txt
|
||||
```
|
||||
|
||||
**NOTE**: Setting up a GPU for use with TensorFlow is way beyond the scope of this README. There's hardware compatibility to consider, drivers to install... There's a lot. So you're just going to have to figure this part out on your own if you want a GPU. But at least from a Python package perspective, the above requirements file has you covered.
|
||||
|
||||
**Pretrained Weights**
|
||||
|
||||
For the latest pretrained weights, check out the releases here on GitHub.
|
||||
|
||||
**Training Data** You can find our training data here:
|
||||
|
||||
https://www.dropbox.com/s/rpylhiv2g0kokts/eyeballer-3.0.zip?dl=1
|
||||
|
||||
There's two things you need from the training data:
|
||||
|
||||
1. `images/` folder, containing all the screenshots (resized down to 224x224)
|
||||
2. `labels.csv` that has all the labels
|
||||
3. `bishop-fox-pretrained-v2.h5` A pretrained weights file you can use right out of the box without training.
|
||||
|
||||
Copy all three into the root of the Eyeballer code tree.
|
||||
|
||||
## Predicting Labels
|
||||
|
||||
NOTE: For best results, make sure you screenshot your websites in a native 1.6x aspect ratio. IE: 1440x900. Eyeballer will scale the image down automatically to the right size for you, but if it's the wrong aspect ratio then it will squish in a way that will affect prediction performance.
|
||||
|
||||
To eyeball some screenshots, just run the "predict" mode:
|
||||
|
||||
```
|
||||
eyeballer.py --weights YOUR_WEIGHTS.h5 predict YOUR_FILE.png
|
||||
```
|
||||
|
||||
Or for a whole directory of files:
|
||||
|
||||
```
|
||||
eyeballer.py --weights YOUR_WEIGHTS.h5 predict PATH_TO/YOUR_FILES/
|
||||
```
|
||||
|
||||
Eyeballer will spit the results back to you in human readable format (a `results.html` file so you can browse it easily) and machine readable format (a `results.csv` file).
|
||||
|
||||
|
||||
## Training
|
||||
To train a new model, run:
|
||||
```
|
||||
eyeballer.py train
|
||||
```
|
||||
|
||||
You'll want a machine with a good GPU for this to run in a reasonable amount of time. Setting that up is outside the scope of this readme, however.
|
||||
|
||||
This will output a new model file (weights.h5 by default).
|
||||
|
||||
## Evaluation
|
||||
|
||||
You just trained a new model, cool! Let's see how well it performs against some images it's never seen before, across a variety of metrics:
|
||||
|
||||
```
|
||||
eyeballer.py --weights YOUR_WEIGHTS.h5 evaluate
|
||||
```
|
||||
|
||||
The output will describe the model's accuracy in both recall and precision for each of the program's labels. (Including "none of the above" as a pseudo-label)
|
||||
|
After Width: | Height: | Size: 27 KiB |
|
After Width: | Height: | Size: 56 KiB |
|
After Width: | Height: | Size: 82 KiB |
|
After Width: | Height: | Size: 12 KiB |
|
After Width: | Height: | Size: 68 KiB |
|
After Width: | Height: | Size: 32 KiB |
@@ -0,0 +1,127 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import click
|
||||
import csv
|
||||
|
||||
from eyeballer.model import EyeballModel, DATA_LABELS
|
||||
from eyeballer.visualization import HeatMap
|
||||
from jinja2 import Template
|
||||
|
||||
|
||||
@click.group(invoke_without_command=True)
|
||||
@click.option('--weights', default=None, type=click.Path(), help="Weights file for input/output")
|
||||
@click.option('--summary/--no-summary', default=False, help="Print model summary at start")
|
||||
@click.option('--seed', default=None, type=int, help="RNG seed for data shuffling and transformations, defaults to random value")
|
||||
@click.pass_context
|
||||
def cli(ctx, weights, summary, seed):
|
||||
model_kwargs = {"weights_file": weights,
|
||||
"print_summary": summary,
|
||||
"seed": seed}
|
||||
|
||||
# pass the model to subcommands
|
||||
ctx.ensure_object(dict)
|
||||
# We only pass the kwargs so we can be lazy and make the model later after the subcommand cli is parsed. This
|
||||
# way, the user doesn't have to wait for tensorflow if they are just calling --help on a subcommand.
|
||||
ctx.obj['model_kwargs'] = model_kwargs
|
||||
|
||||
|
||||
@cli.command()
|
||||
@click.option('--graphs/--no-graphs', default=False, help="Save accuracy and loss graphs to file")
|
||||
@click.option('--epochs', default=20, type=int, help="Number of epochs") # TODO better help string
|
||||
@click.option('--batchsize', default=32, type=int, help="Batch size") # TODO better help string
|
||||
@click.pass_context
|
||||
def train(ctx, graphs, batchsize, epochs):
|
||||
model = EyeballModel(**ctx.obj['model_kwargs'])
|
||||
model.train(print_graphs=graphs, batch_size=batchsize, epochs=epochs)
|
||||
|
||||
|
||||
@cli.command()
|
||||
@click.argument('screenshot')
|
||||
@click.option('--heatmap', default=False, is_flag=True, help="Create a heatmap graphfor the prediction")
|
||||
@click.option('--threshold', default=.5, type=float, help="Threshold confidence for labeling")
|
||||
@click.pass_context
|
||||
def predict(ctx, screenshot, heatmap, threshold):
|
||||
model = EyeballModel(**ctx.obj['model_kwargs'])
|
||||
results = model.predict(screenshot)
|
||||
|
||||
if heatmap:
|
||||
# Generate a heatmap
|
||||
HeatMap(screenshot, model, threshold).generate()
|
||||
|
||||
if not results:
|
||||
print("Error: Input file does not exist")
|
||||
if len(results) == 1:
|
||||
print(results)
|
||||
else:
|
||||
with open("results.csv", "w", newline="") as csvfile:
|
||||
fieldnames = ["filename", "custom404", "login", "webapp", "oldlooking", "parked"]
|
||||
labelwriter = csv.DictWriter(csvfile, fieldnames=fieldnames)
|
||||
labelwriter.writeheader()
|
||||
labelwriter.writerows(results)
|
||||
|
||||
print("Output written to results.csv")
|
||||
buildHTML(processResults(results, threshold))
|
||||
print("HTML written to results.html")
|
||||
|
||||
|
||||
def processResults(results, threshold):
|
||||
'''Filter the initial results dictionary and reformat it for use in JS.
|
||||
|
||||
Keyword arguments:
|
||||
results -- dictionary output from predict function
|
||||
|
||||
'''
|
||||
jsResults = {}
|
||||
|
||||
for result in results:
|
||||
positiveTags = []
|
||||
|
||||
for label, label_info in result.items():
|
||||
if (label == 'filename'):
|
||||
pass
|
||||
elif label_info > threshold:
|
||||
positiveTags.append(label)
|
||||
|
||||
jsResults[result['filename']] = positiveTags
|
||||
return(jsResults)
|
||||
|
||||
|
||||
def buildHTML(jsResults):
|
||||
'''Build HTML around the JS Dictionary that is passed from processResults.
|
||||
|
||||
Keyword arguments:
|
||||
jsResults -- dictionary output from processResults function
|
||||
'''
|
||||
html_output = ""
|
||||
with open("prediction_output_template.html") as template_file:
|
||||
template = Template(template_file.read())
|
||||
html_output = template.render(jsResults=jsResults)
|
||||
|
||||
with open('results.html', 'w') as file:
|
||||
file.write(html_output)
|
||||
|
||||
|
||||
def pretty_print_evaluation(results):
|
||||
"""Print a human-readable summary of the evaluation"""
|
||||
# We use 4.2% to handle all the way from " 0.00%" (7chars) to "100.00%" (7chars)
|
||||
for label in DATA_LABELS:
|
||||
print("{} Precision Score: {:4.2%}".format(label, results[label]['precision']))
|
||||
print("{} Recall Score: {:4.2%}".format(label, results[label]['recall']))
|
||||
print("'None of the above' Precision: {:4.2%}".format(results['none_of_the_above_precision']))
|
||||
print("'None of the above' Recall: {:4.2%}".format(results['none_of_the_above_recall']))
|
||||
print("All or nothing Accuracy: {:4.2%}".format(results['all_or_nothing_accuracy']))
|
||||
print("Overall Binary Accuracy: {:4.2%}".format(results['total_binary_accuracy']))
|
||||
print("Top 10 worst predictions: {}".format(results['top_10_worst'][1]))
|
||||
|
||||
|
||||
@cli.command()
|
||||
@click.option('--threshold', default=.5, type=float, help="Threshold confidence for labeling")
|
||||
@click.pass_context
|
||||
def evaluate(ctx, threshold):
|
||||
model = EyeballModel(**ctx.obj['model_kwargs'])
|
||||
results = model.evaluate(threshold)
|
||||
pretty_print_evaluation(results)
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
cli()
|
||||
@@ -0,0 +1,18 @@
|
||||
import numpy as np
|
||||
|
||||
from Augmentor.Operations import Operation
|
||||
from tensorflow.keras.applications.mobilenet import preprocess_input
|
||||
|
||||
|
||||
class EyeballerAugmentation(Operation):
|
||||
def __init__(self, probability=1):
|
||||
Operation.__init__(self, probability)
|
||||
|
||||
# Class must implement the perform_operation method
|
||||
def perform_operation(self, images):
|
||||
return_list = []
|
||||
for image in images:
|
||||
image_array = np.array(image).astype('uint8')
|
||||
image_array = preprocess_input(image_array)
|
||||
return_list.append(image_array)
|
||||
return return_list
|
||||
@@ -1,276 +0,0 @@
|
||||
#!/usr/bin/python3
|
||||
|
||||
import argparse
|
||||
import os
|
||||
import random
|
||||
import time
|
||||
|
||||
import matplotlib.pyplot as plt
|
||||
import numpy as np
|
||||
import pandas as pd
|
||||
|
||||
from keras import regularizers
|
||||
from keras.applications import MobileNet
|
||||
from keras.applications.mobilenet import preprocess_input
|
||||
from keras.callbacks import ModelCheckpoint
|
||||
from keras.layers import Dropout, Dense
|
||||
from keras.layers import GlobalAveragePooling2D
|
||||
from keras.models import Model
|
||||
from keras.optimizers import Adam
|
||||
from keras.preprocessing import image
|
||||
from keras.preprocessing.image import ImageDataGenerator
|
||||
from sklearn.metrics import precision_score, recall_score
|
||||
|
||||
# Parse the arguments
|
||||
parser = argparse.ArgumentParser(description='Give those screenshots of yours a quick eyeballing')
|
||||
parser.add_argument("mode", help="Mode of operation. One of \"train\", \"predict\", or \"evaluate\".")
|
||||
parser.add_argument("--weights", help="Weights file for input/output")
|
||||
parser.add_argument("--batchsize", help="Batch size", default=32, type=int)
|
||||
parser.add_argument("--epochs", help="Number of epochs", default=20, type=int)
|
||||
parser.add_argument("--screenshot", help="File to predict")
|
||||
parser.add_argument("--summary", help="Print model summary at start", action='store_true')
|
||||
parser.add_argument("--graphs", help="Save accuracy and loss graphs to file", action='store_true')
|
||||
parser.add_argument("--seed", help="RNG seed for data shuffling and transformations", default=0, type=int)
|
||||
|
||||
args = parser.parse_args()
|
||||
|
||||
|
||||
class EyeballModel:
|
||||
checkpoint_file = "weights-snapshot.h5"
|
||||
image_dir = "images_224x224/"
|
||||
image_width, image_height = 224, 224
|
||||
input_shape = (image_width, image_height, 3)
|
||||
|
||||
def __init__(self, print_summary=False, weights_file="weights.h5", seed=0):
|
||||
# Build the model
|
||||
base_model = MobileNet(weights='imagenet', include_top=False, input_shape=self.input_shape)
|
||||
x = base_model.output
|
||||
x = GlobalAveragePooling2D()(x)
|
||||
x = Dense(256, activation="relu", name="HiddenLayer1")(x)
|
||||
x = Dropout(0.5)(x)
|
||||
x = Dense(128, activation="relu", name="HiddenLayer2", kernel_regularizer=regularizers.l2(0.01))(x)
|
||||
x = Dropout(0.2)(x)
|
||||
output_layer = Dense(3, activation="sigmoid", name="OutputLayer")(x)
|
||||
self.model = Model(inputs=base_model.input, outputs=output_layer)
|
||||
|
||||
# for layer in base_model.layers:
|
||||
# layer.trainable = False
|
||||
|
||||
adam = Adam(lr=0.0005)
|
||||
self.model.compile(optimizer=adam, loss="binary_crossentropy", metrics=["accuracy"])
|
||||
|
||||
if print_summary:
|
||||
print(self.model.summary())
|
||||
|
||||
# Pull out our labels for use in generators later
|
||||
data = pd.read_csv("labels.csv")
|
||||
self.training_labels = data.loc[data['evaluation'] == False]
|
||||
self.evaluation_labels = data.loc[data['evaluation'] == True]
|
||||
|
||||
# Shuffle the training labels
|
||||
self.seed = seed
|
||||
print("Using seed: " + str(seed))
|
||||
random.seed(self.seed)
|
||||
self.training_labels = self.training_labels.sample(frac=1)
|
||||
|
||||
if weights_file is not None and os.path.isfile(weights_file):
|
||||
self.model.load_weights(weights_file)
|
||||
print("Loaded model from file.")
|
||||
else:
|
||||
print("No model loaded from file")
|
||||
|
||||
# Training
|
||||
def train(self, epochs=20, batch_size=32, print_graphs=False):
|
||||
print("Training with seed: " + str(self.seed))
|
||||
|
||||
# Data augmentation
|
||||
data_generator = ImageDataGenerator(
|
||||
preprocessing_function=preprocess_input,
|
||||
shear_range=0.0,
|
||||
zoom_range=0.2,
|
||||
samplewise_center=True,
|
||||
validation_split=0.2,
|
||||
horizontal_flip=False)
|
||||
|
||||
training_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=["custom404", "login", "homepage"],
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=batch_size,
|
||||
subset='training',
|
||||
shuffle=True,
|
||||
seed=self.seed,
|
||||
class_mode="other")
|
||||
validation_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=["custom404", "login", "homepage"],
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=batch_size,
|
||||
subset='validation',
|
||||
shuffle=False,
|
||||
seed=self.seed,
|
||||
class_mode="other")
|
||||
|
||||
# Model checkpoint - Saves model weights when validation accuracy improves
|
||||
callbacks = [ModelCheckpoint(self.checkpoint_file, monitor='val_loss', verbose=1, save_best_only=True,
|
||||
save_weights_only=True, mode='min')]
|
||||
|
||||
history = self.model.fit_generator(
|
||||
training_generator,
|
||||
steps_per_epoch=len(training_generator.filenames) // batch_size,
|
||||
epochs=epochs,
|
||||
validation_data=validation_generator,
|
||||
validation_steps=len(validation_generator.filenames) // batch_size,
|
||||
callbacks=callbacks,
|
||||
verbose=1)
|
||||
|
||||
if print_graphs:
|
||||
# Plot training & validation accuracy values
|
||||
plt.plot(history.history['acc'])
|
||||
plt.plot(history.history['val_acc'])
|
||||
plt.title('Model accuracy')
|
||||
plt.ylabel('Accuracy')
|
||||
plt.xlabel('Epoch')
|
||||
plt.legend(['Train', 'Validation'], loc='upper left')
|
||||
plt.savefig("accuracy.png")
|
||||
plt.clf()
|
||||
plt.cla()
|
||||
plt.close()
|
||||
|
||||
# Plot training & validation loss values
|
||||
plt.plot(history.history['loss'])
|
||||
plt.plot(history.history['val_loss'])
|
||||
plt.title('Model loss')
|
||||
plt.ylabel('Loss')
|
||||
plt.xlabel('Epoch')
|
||||
plt.legend(['Train', 'Validation'], loc='upper left')
|
||||
plt.savefig("loss.png")
|
||||
|
||||
# Single predict on a file
|
||||
def predict(self, filename):
|
||||
# Load the image into memory
|
||||
img = image.load_img(filename, target_size=(self.image_width, self.image_height))
|
||||
img = image.img_to_array(img)
|
||||
img = np.expand_dims(img, axis=0)
|
||||
img = preprocess_input(img)
|
||||
|
||||
time_start = time.time()
|
||||
prediction = self.model.predict(img, batch_size=1)
|
||||
time_end = time.time()
|
||||
print("Predictions:")
|
||||
print("\tCustom 404: " + str(round(prediction[0][0] * 100, 2)) + "%")
|
||||
print("\tLogin Page: " + str(round(prediction[0][1] * 100, 2)) + "%")
|
||||
print("\tHome Page: " + str(round(prediction[0][2] * 100, 2)) + "%")
|
||||
print("Prediction Took (seconds): ", time_end - time_start)
|
||||
|
||||
# Evaluate performance against the persistent evaluation data set
|
||||
def evaluate(self, threshold=0.5):
|
||||
# Prepare the data
|
||||
data_generator = ImageDataGenerator(
|
||||
preprocessing_function=preprocess_input)
|
||||
evaluation_generator = data_generator.flow_from_dataframe(
|
||||
self.evaluation_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=["custom404", "login", "homepage"],
|
||||
target_size=(self.image_width, self.image_height),
|
||||
shuffle=False,
|
||||
batch_size=1,
|
||||
class_mode="other")
|
||||
# If a seed was selected, then also evaluate on the validation set for that seed
|
||||
if args.seed > 0:
|
||||
print("Using validation set...")
|
||||
# Data augmentation
|
||||
data_generator = ImageDataGenerator(
|
||||
preprocessing_function=preprocess_input,
|
||||
shear_range=0.0,
|
||||
zoom_range=0.2,
|
||||
samplewise_center=True,
|
||||
validation_split=0.2,
|
||||
horizontal_flip=False)
|
||||
evaluation_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=["custom404", "login", "homepage"],
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=1,
|
||||
subset='validation',
|
||||
shuffle=False,
|
||||
seed=self.seed,
|
||||
class_mode="other")
|
||||
else:
|
||||
print("Using evaluation set...")
|
||||
|
||||
predictions = self.model.predict_generator(evaluation_generator, verbose=1, steps=len(evaluation_generator))
|
||||
predictions = predictions > threshold
|
||||
|
||||
all_or_nothing_success = 0
|
||||
|
||||
correct_per_category_counts = [0, 0, 0]
|
||||
total_correct_count = 0
|
||||
|
||||
labels = evaluation_generator.data.tolist()
|
||||
|
||||
# Zip them together, so we can evaluate easier
|
||||
for row in zip(labels, predictions.tolist()):
|
||||
# All or nothing count
|
||||
if row[0] == row[1]:
|
||||
all_or_nothing_success += 1
|
||||
|
||||
# Per-category count
|
||||
for i in range(len(row[0])):
|
||||
if row[0][i] == row[1][i]:
|
||||
correct_per_category_counts[i] += 1
|
||||
total_correct_count += 1
|
||||
|
||||
custom404_labels = np.reshape(np.array(labels)[:, 0:1], len(labels)).tolist()
|
||||
custom404_predicitons = np.reshape(np.array(predictions)[:, 0:1], len(predictions)).tolist()
|
||||
|
||||
login_labels = np.reshape(np.array(labels)[:, 1:2], len(labels)).tolist()
|
||||
login_predicitons = np.reshape(np.array(predictions)[:, 1:2], len(predictions)).tolist()
|
||||
|
||||
homepage_labels = np.reshape(np.array(labels)[:, 2:3], len(labels)).tolist()
|
||||
homepage_predicitons = np.reshape(np.array(predictions)[:, 2:3], len(predictions)).tolist()
|
||||
|
||||
custom404_precision = precision_score(custom404_labels, custom404_predicitons)
|
||||
custom404_recall = recall_score(custom404_labels, custom404_predicitons)
|
||||
print("Custom404 Precision Score: " + str(round(custom404_precision * 100, 2)) + "%")
|
||||
print("Custom404 Recall Score: " + str(round(custom404_recall * 100, 2)) + "%")
|
||||
|
||||
login_precision = precision_score(login_labels, login_predicitons)
|
||||
login_recall = recall_score(login_labels, login_predicitons)
|
||||
print("Login Precision Score: " + str(round(login_precision * 100, 2)) + "%")
|
||||
print("Login Recall Score: " + str(round(login_recall * 100, 2)) + "%")
|
||||
|
||||
homepage_precision = precision_score(homepage_labels, homepage_predicitons)
|
||||
homepage_recall = recall_score(homepage_labels, homepage_predicitons)
|
||||
print("Homepage Precision Score: " + str(round(homepage_precision * 100, 2)) + "%")
|
||||
print("Homepage Recall Score: " + str(round(homepage_recall * 100, 2)) + "%")
|
||||
|
||||
print("Overall Binary Accuracy: " + str(
|
||||
round((total_correct_count * 100) / (len(evaluation_generator) * 3), 2)) + "%")
|
||||
print("All or nothing accuracy: " + str(
|
||||
round((all_or_nothing_success / len(evaluation_generator)) * 100, 2)) + "%")
|
||||
|
||||
|
||||
seed = args.seed
|
||||
if args.seed == 0:
|
||||
seed = random.randint(0, 999999)
|
||||
|
||||
model = EyeballModel(weights_file=args.weights, print_summary=args.summary, seed=seed)
|
||||
if args.mode == "train":
|
||||
model.train(print_graphs=args.graphs, batch_size=args.batchsize, epochs=args.epochs)
|
||||
elif args.mode == "predict":
|
||||
if args.screenshot is None:
|
||||
print("Error: Use the --screenshot flag to specify what file you want to predict on")
|
||||
else:
|
||||
model.predict(args.screenshot)
|
||||
elif args.mode == "evaluate":
|
||||
model.evaluate(threshold=0.5)
|
||||
else:
|
||||
print("Error: " + args.mode + " is not a valid mode. Try one of \"train\", \"predict\", or \"evaluate\"")
|
||||
@@ -0,0 +1,399 @@
|
||||
import os
|
||||
import random
|
||||
import sys
|
||||
import progressbar
|
||||
|
||||
# Prevent Tkinter Dependency
|
||||
import matplotlib
|
||||
matplotlib.use('agg') # noqa: E402
|
||||
import matplotlib.pyplot as plt
|
||||
|
||||
import numpy as np
|
||||
import pandas as pd
|
||||
import Augmentor
|
||||
import tensorflow as tf
|
||||
|
||||
from tensorflow.keras.applications.mobilenet import preprocess_input
|
||||
from sklearn.metrics import classification_report, accuracy_score, hamming_loss
|
||||
from eyeballer.augmentation import EyeballerAugmentation
|
||||
|
||||
DATA_LABELS = ["custom404", "login", "webapp", "oldlooking", "parked"]
|
||||
|
||||
|
||||
class EyeballModel:
|
||||
"""The primary model class of Eyeballer.
|
||||
|
||||
Contains high-level functions for training, evaluating, and predicting.
|
||||
"""
|
||||
graphs_directory = "graphs/"
|
||||
checkpoint_file = "weights.h5"
|
||||
image_dir = "images/"
|
||||
image_width, image_height = 224, 224
|
||||
input_shape = (image_width, image_height, 3)
|
||||
|
||||
def __init__(self, weights_file, print_summary=False, seed=None, quiet=False):
|
||||
"""Constructor for model class.
|
||||
|
||||
Keyword arguments:
|
||||
print_summary -- Whether or not to print to stdout the keras model summary, containing a detailed description of every model layer
|
||||
weights_file -- A filename for where to load the model's weights.
|
||||
seed -- PRNG seed, useful for repeating a previous run and using the same data. Training/Validation split is determined randomly.
|
||||
"""
|
||||
# # Build the model
|
||||
self.model = tf.keras.Sequential()
|
||||
pretrained_layer = tf.keras.applications.mobilenet.MobileNet(weights='imagenet', include_top=False, input_shape=self.input_shape)
|
||||
self.model.add(pretrained_layer)
|
||||
self.model.add(tf.keras.layers.GlobalAveragePooling2D())
|
||||
self.model.add(tf.keras.layers.Dense(256, activation="relu"))
|
||||
self.model.add(tf.keras.layers.Dropout(0.5))
|
||||
self.model.add(tf.keras.layers.Dense(128, activation="relu"))
|
||||
self.model.add(tf.keras.layers.Dropout(0.2))
|
||||
self.model.add(tf.keras.layers.Dense(len(DATA_LABELS), activation="sigmoid"))
|
||||
|
||||
self.model.compile(optimizer=tf.keras.optimizers.Adam(0.0005),
|
||||
loss="binary_crossentropy",
|
||||
metrics=["accuracy"])
|
||||
|
||||
if weights_file is not None and os.path.isfile(weights_file):
|
||||
try:
|
||||
self.model.load_weights(weights_file)
|
||||
except OSError:
|
||||
print("ERROR: Unable to open weights file '{}'".foramt(weights_file))
|
||||
sys.exit(-1)
|
||||
print("Loaded model from file.")
|
||||
else:
|
||||
if weights_file is not None:
|
||||
raise FileNotFoundError
|
||||
print("WARN: No model loaded from file. Generating random model")
|
||||
|
||||
if print_summary:
|
||||
print(self.model.summary())
|
||||
|
||||
self.quiet = quiet
|
||||
self.seed = seed
|
||||
|
||||
def _init_labels(self):
|
||||
# Pull out our labels for use in generators later
|
||||
data = pd.read_csv("labels.csv")
|
||||
self.training_labels = data.loc[data['evaluation'] == False] # noqa: E712
|
||||
self.evaluation_labels = data.loc[data['evaluation'] == True] # noqa: E712
|
||||
|
||||
# Shuffle the training labels
|
||||
self.random_seed = False
|
||||
if self.seed is None:
|
||||
self.random_seed = True
|
||||
self.seed = random.randint(0, 999999)
|
||||
print("No seed set, ", end='')
|
||||
print("using seed: {}".format(self.seed))
|
||||
random.seed(self.seed)
|
||||
self.training_labels = self.training_labels.sample(frac=1)
|
||||
|
||||
# Data augmentation
|
||||
augmentor = Augmentor.Pipeline()
|
||||
augmentor.set_seed(self.seed)
|
||||
augmentor.zoom(probability=0.75, min_factor=0.8, max_factor=1.2)
|
||||
augmentor.random_color(probability=0.75, min_factor=0.5, max_factor=1.0)
|
||||
augmentor.random_contrast(probability=0.75, min_factor=0.8, max_factor=1.0)
|
||||
augmentor.random_brightness(probability=0.75, min_factor=0.8, max_factor=1.2)
|
||||
augmentor.random_erasing(probability=0.75, rectangle_area=0.15)
|
||||
|
||||
# Finalizes the augmentation with a custom operation to prepare the image for the specific pretrained model we're using
|
||||
training_augmentation = EyeballerAugmentation()
|
||||
augmentor.add_operation(training_augmentation)
|
||||
self.preprocess_training_function = augmentor.keras_preprocess_func()
|
||||
|
||||
def train(self, epochs=20, batch_size=32, print_graphs=False):
|
||||
"""Train the model, making a new weights file at each successfull checkpoint. You'll probably need a GPU for this to realistically run.
|
||||
|
||||
Keyword arguments:
|
||||
epochs -- The number of epochs to train for. (An epoch is one pass-through of the dataset)
|
||||
batch_size -- How many images to batch together when training. Generally speaking, the higher the better, until you run out of memory.
|
||||
print_graphs --- Whether or not to create accuracy and loss graphs. If true, they'll be written to accuracy.png and loss.png
|
||||
"""
|
||||
print("Training with seed: " + str(self.seed))
|
||||
|
||||
self._init_labels()
|
||||
data_generator = tf.keras.preprocessing.image.ImageDataGenerator(
|
||||
preprocessing_function=self.preprocess_training_function,
|
||||
validation_split=0.2,
|
||||
samplewise_center=True)
|
||||
|
||||
training_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=DATA_LABELS,
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=batch_size,
|
||||
subset='training',
|
||||
shuffle=True,
|
||||
seed=self.seed,
|
||||
class_mode="raw")
|
||||
validation_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=DATA_LABELS,
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=batch_size,
|
||||
subset='validation',
|
||||
shuffle=False,
|
||||
seed=self.seed,
|
||||
class_mode="raw")
|
||||
|
||||
# Model checkpoint - Saves model weights when validation accuracy improves
|
||||
callbacks = [tf.keras.callbacks.ModelCheckpoint(self.checkpoint_file,
|
||||
monitor='val_loss',
|
||||
verbose=1,
|
||||
save_best_only=True,
|
||||
save_weights_only=True,
|
||||
mode='min'),
|
||||
tf.keras.callbacks.TensorBoard(log_dir='logs',
|
||||
histogram_freq=2,
|
||||
write_graph=True,
|
||||
write_images=False,
|
||||
update_freq='epoch',
|
||||
profile_batch=2,
|
||||
embeddings_freq=0,
|
||||
embeddings_metadata=None),
|
||||
]
|
||||
|
||||
history = self.model.fit(
|
||||
training_generator,
|
||||
steps_per_epoch=len(training_generator.filenames) // batch_size,
|
||||
epochs=epochs,
|
||||
validation_data=validation_generator,
|
||||
validation_steps=len(validation_generator.filenames) // batch_size,
|
||||
callbacks=callbacks,
|
||||
verbose=1)
|
||||
|
||||
if print_graphs:
|
||||
if not os.path.exists(self.graphs_directory):
|
||||
os.makedirs(self.graphs_directory)
|
||||
# Plot training & validation accuracy values
|
||||
plt.plot(history.history['acc'])
|
||||
plt.plot(history.history['val_acc'])
|
||||
plt.title('Model accuracy')
|
||||
plt.ylabel('Accuracy')
|
||||
plt.xlabel('Epoch')
|
||||
plt.legend(['Train', 'Validation'], loc='upper left')
|
||||
plt.savefig(self.graphs_directory + "accuracy.png")
|
||||
plt.clf()
|
||||
plt.cla()
|
||||
plt.close()
|
||||
|
||||
# Plot training & validation loss values
|
||||
plt.plot(history.history['loss'])
|
||||
plt.plot(history.history['val_loss'])
|
||||
plt.title('Model loss')
|
||||
plt.ylabel('Loss')
|
||||
plt.xlabel('Epoch')
|
||||
plt.legend(['Train', 'Validation'], loc='upper left')
|
||||
plt.savefig(self.graphs_directory + "loss.png")
|
||||
|
||||
def predict_on_array(self, image):
|
||||
"""Predict the labels for a single screenshot
|
||||
|
||||
Keyword arguments:
|
||||
image -- The numpy array of the image to classify
|
||||
"""
|
||||
img = np.expand_dims(image, axis=0)
|
||||
img = preprocess_input(img)
|
||||
|
||||
prediction = self.model.predict(img, batch_size=1)
|
||||
result = dict()
|
||||
result["filename"] = "custom-image"
|
||||
result["custom404"] = prediction[0][0]
|
||||
result["login"] = prediction[0][1]
|
||||
result["webapp"] = prediction[0][2]
|
||||
result["oldlooking"] = prediction[0][3]
|
||||
result["parked"] = prediction[0][4]
|
||||
return result
|
||||
|
||||
def predict(self, path, threshold=0.5):
|
||||
"""Predict the labels for a single file or directory of files
|
||||
|
||||
Keyword arguments:
|
||||
path -- The path to the file(s) that we'll be evaluating.
|
||||
"""
|
||||
# Is this a single file, or a directory?
|
||||
screenshots = []
|
||||
if os.path.isfile(path):
|
||||
screenshots = [path]
|
||||
elif os.path.isdir(path):
|
||||
screenshots = os.listdir(path)
|
||||
screenshots = [os.path.join(path, s) for s in screenshots]
|
||||
else:
|
||||
raise FileNotFoundError
|
||||
|
||||
results = []
|
||||
bar = progressbar.ProgressBar()
|
||||
if self.quiet:
|
||||
bar = progressbar.NullBar()
|
||||
for screenshot in bar(screenshots):
|
||||
# Load the image into memory
|
||||
img = None
|
||||
try:
|
||||
img = tf.keras.preprocessing.image.load_img(screenshot, target_size=(self.image_width, self.image_height))
|
||||
img = tf.keras.preprocessing.image.img_to_array(img)
|
||||
img = np.expand_dims(img, axis=0)
|
||||
img = preprocess_input(img)
|
||||
except IsADirectoryError:
|
||||
print("\nWARN: Skipping directory: ", screenshot)
|
||||
continue
|
||||
except OSError:
|
||||
print("\nWARN: Skipping empty or corrupt file: ", screenshot)
|
||||
continue
|
||||
|
||||
prediction = self.model.predict(img, batch_size=1)
|
||||
result = dict()
|
||||
result["filename"] = screenshot
|
||||
result["custom404"] = prediction[0][0]
|
||||
result["login"] = prediction[0][1]
|
||||
result["webapp"] = prediction[0][2]
|
||||
result["oldlooking"] = prediction[0][3]
|
||||
result["parked"] = prediction[0][4]
|
||||
results.append(result)
|
||||
return results
|
||||
|
||||
def evaluate(self, threshold=0.5):
|
||||
"""Evaluate performance against the persistent evaluation data set
|
||||
|
||||
Keyword arguments:
|
||||
threshold -- Value between 0->1. The cutoff where the numerical prediction becomes boolean. Default: 0.5
|
||||
"""
|
||||
# Prepare the data
|
||||
self._init_labels()
|
||||
data_generator = tf.keras.preprocessing.image.ImageDataGenerator(
|
||||
preprocessing_function=preprocess_input)
|
||||
evaluation_generator = data_generator.flow_from_dataframe(
|
||||
self.evaluation_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=DATA_LABELS,
|
||||
target_size=(self.image_width, self.image_height),
|
||||
shuffle=False,
|
||||
batch_size=1,
|
||||
class_mode="raw")
|
||||
# If a seed was selected, then also evaluate on the validation set for that seed
|
||||
if not self.random_seed:
|
||||
print("Using validation set...")
|
||||
# Data augmentation
|
||||
data_generator = tf.keras.preprocessing.image.ImageDataGenerator(
|
||||
preprocessing_function=self.preprocess_training_function,
|
||||
samplewise_center=True,
|
||||
validation_split=0.2)
|
||||
evaluation_generator = data_generator.flow_from_dataframe(
|
||||
self.training_labels,
|
||||
directory=self.image_dir,
|
||||
x_col="filename",
|
||||
y_col=DATA_LABELS,
|
||||
target_size=(self.image_width, self.image_height),
|
||||
batch_size=1,
|
||||
subset='validation',
|
||||
shuffle=False,
|
||||
seed=self.seed,
|
||||
class_mode="raw")
|
||||
else:
|
||||
print("Using evaluation set...")
|
||||
|
||||
predictions = self.model.predict(
|
||||
evaluation_generator,
|
||||
verbose=1,
|
||||
steps=len(evaluation_generator))
|
||||
|
||||
self._save_prediction_histograms(predictions)
|
||||
predictions = predictions > threshold
|
||||
ground_truth = self.evaluation_labels[DATA_LABELS].to_numpy()
|
||||
filenames = self.evaluation_labels[["filename"]].to_numpy()
|
||||
stats = classification_report(ground_truth, predictions, target_names=DATA_LABELS, output_dict=True)
|
||||
stats["total_binary_accuracy"] = 1 - hamming_loss(ground_truth, predictions)
|
||||
stats["all_or_nothing_accuracy"] = accuracy_score(ground_truth, predictions)
|
||||
stats["top_10_best"] = self._top_images(filenames, ground_truth, predictions, best=True)
|
||||
stats["top_10_worst"] = self._top_images(filenames, ground_truth, predictions, best=False)
|
||||
stats["none_of_the_above_recall"] = self._none_of_the_above_recall(ground_truth, predictions)
|
||||
stats["none_of_the_above_precision"] = self._none_of_the_above_precision(ground_truth, predictions)
|
||||
return stats
|
||||
|
||||
def _none_of_the_above_recall(self, labels, predictions):
|
||||
"""Returns the recall score for the 'none of the above' images.
|
||||
That means, all the images that don't have a category.
|
||||
"""
|
||||
total_count = 0
|
||||
correct_count = 0
|
||||
for item in zip(labels.astype(int), predictions.astype(int)):
|
||||
# Is this a none of the above?
|
||||
if not item[0].any():
|
||||
total_count += 1
|
||||
if not item[1].any():
|
||||
correct_count += 1
|
||||
if total_count == 0:
|
||||
print("WARNING: None of the Above Recall is NaN")
|
||||
return 0
|
||||
return correct_count / total_count
|
||||
|
||||
def _none_of_the_above_precision(self, labels, predictions):
|
||||
"""Returns the precision score for the 'none of the above' images.
|
||||
That means, all the images that don't have a category.
|
||||
"""
|
||||
total_count = 0
|
||||
correct_count = 0
|
||||
for item in zip(labels.astype(int), predictions.astype(int)):
|
||||
# Is this a none of the above prediction?
|
||||
if not item[1].any():
|
||||
total_count += 1
|
||||
if not item[0].any():
|
||||
correct_count += 1
|
||||
if total_count == 0:
|
||||
print("WARNING: None of the Above Precision is NaN")
|
||||
return 0
|
||||
return correct_count / total_count
|
||||
|
||||
def _top_images(self, filenames, ground_truth, predictions, top_k=10, best=False):
|
||||
"""Collect top-k best or top-k worst predicted images
|
||||
|
||||
Keyword arguments:
|
||||
ground_truth -- The correct labels
|
||||
predictions -- The numpy array of predictions
|
||||
top_k -- Top k elements
|
||||
best -- True/False. Calculate either the best or worst images
|
||||
|
||||
:Return -- Tuple of top-k indicies and top-k filenames
|
||||
"""
|
||||
true_labels = np.array(ground_truth).astype(float)
|
||||
predictions = predictions.astype(float)
|
||||
|
||||
differences = np.abs(predictions - true_labels).sum(axis=1)
|
||||
indicies = np.argsort(differences, axis=0)
|
||||
|
||||
top_file_list = []
|
||||
|
||||
if not best:
|
||||
# Reverse numpy array
|
||||
indicies = np.flipud(indicies)
|
||||
|
||||
for i in indicies[:top_k]:
|
||||
top_file_list.append(filenames[i][0])
|
||||
|
||||
return indicies[:top_k], top_file_list
|
||||
|
||||
def _save_prediction_histograms(self, predictions, buckets=50):
|
||||
"""Saves a series of histogram screenshots
|
||||
|
||||
Keyword arguments:
|
||||
predictions -- The numpy array of predicted labels, ranging from 0->1.
|
||||
buckets -- The number of buckets to divide the data into. Default: 50
|
||||
:Returns -- Nothing"
|
||||
"""
|
||||
figure, axes = plt.subplots(nrows=len(DATA_LABELS))
|
||||
for i, label in enumerate(DATA_LABELS):
|
||||
axes[i].hist(predictions[:, i], buckets, alpha=.75)
|
||||
axes[i].set_xlabel("Prediction")
|
||||
axes[i].set_ylabel("Counts of Predictions")
|
||||
axes[i].set_title(label)
|
||||
axes[i].grid(True)
|
||||
figure.set_size_inches(5, 3*len(DATA_LABELS))
|
||||
figure.tight_layout()
|
||||
if not os.path.exists(self.graphs_directory):
|
||||
os.makedirs(self.graphs_directory)
|
||||
plt.savefig(self.graphs_directory + "label_histograms.png")
|
||||
@@ -0,0 +1,129 @@
|
||||
import numpy as np
|
||||
import math
|
||||
import tensorflow as tf
|
||||
|
||||
from copy import deepcopy
|
||||
from matplotlib import pyplot as plt
|
||||
from eyeballer.model import DATA_LABELS
|
||||
|
||||
|
||||
class HeatMap():
|
||||
def __init__(self, screenshot_path, model, threshold=0.5, boxsize=28, step=7):
|
||||
self.model = model
|
||||
|
||||
img = tf.keras.preprocessing.image.load_img(screenshot_path, target_size=(self.model.image_width, self.model.image_height))
|
||||
img = tf.keras.preprocessing.image.img_to_array(img)
|
||||
|
||||
self.screenshot = img
|
||||
self.boxsize = boxsize
|
||||
self.step = step
|
||||
self.x = 0
|
||||
self.y = 0
|
||||
self.screenshot_path = screenshot_path
|
||||
self.gamma = 3
|
||||
self.threshold = threshold
|
||||
|
||||
def generate(self, output_file="heatmap.png"):
|
||||
""" Make a single heatmap image and return it """
|
||||
heatmaps = []
|
||||
labels = []
|
||||
results = self.model.predict(self.screenshot_path)
|
||||
results = results[0]
|
||||
for label in DATA_LABELS:
|
||||
boxsize = self.boxsize
|
||||
# Ignore this label if it didn't predict positively (true label)
|
||||
if results[label] > self.threshold:
|
||||
worst_score = 1
|
||||
while worst_score > self.threshold:
|
||||
heatmap, worst_score = self._get_heatmap(label, boxsize)
|
||||
if worst_score > self.threshold:
|
||||
boxsize += 28
|
||||
print("Didn't get a good image for {}. Trying again with a bigger boxsize: {}".format(label, boxsize))
|
||||
else:
|
||||
heatmaps.append(heatmap)
|
||||
labels.append(label)
|
||||
|
||||
plt.figure()
|
||||
screenshot_image = tf.keras.preprocessing.image.load_img(self.screenshot_path, target_size=(self.model.image_width, self.model.image_width))
|
||||
_, subplots = plt.subplots(1, len(heatmaps))
|
||||
# This is a little janky, but matplotlib returns a list above if there's multiple subplots, and just a single subplot if there's only one
|
||||
# it would have been easier if it was always a list. But alas
|
||||
if not heatmaps:
|
||||
print("No heatmap made. The image did not have a True classification for any label")
|
||||
return
|
||||
if len(heatmaps) > 1:
|
||||
for i, heatmap in enumerate(heatmaps):
|
||||
subplots[i].imshow(screenshot_image, cmap='binary', interpolation='none')
|
||||
subplots[i].imshow(heatmap, alpha=0.5, interpolation='none')
|
||||
subplots[i].set_title(labels[i])
|
||||
else:
|
||||
subplots.imshow(screenshot_image, cmap='binary', interpolation='none')
|
||||
subplots.imshow(heatmap, alpha=0.5, interpolation='none')
|
||||
subplots.set_title(labels[0])
|
||||
plt.savefig(output_file)
|
||||
print("Heatmap image written to: {}".format(output_file))
|
||||
|
||||
def _get_heatmap(self, label, boxsize):
|
||||
worst_score = 1
|
||||
self.x, self.y = 0, 0
|
||||
|
||||
heatmap = np.ones((self.model.image_width, self.model.image_height))
|
||||
heatmap *= 255
|
||||
while True:
|
||||
# Occlude an image
|
||||
occluded_image, x, y = self._occlude(boxsize)
|
||||
if occluded_image is not None:
|
||||
# Score the new occluded image
|
||||
results = self.model.predict_on_array(occluded_image)
|
||||
score = results[label] # TODO
|
||||
worst_score = min(worst_score, score)
|
||||
# Scale the score up to pixel values
|
||||
score = math.floor(score * 255)
|
||||
# Anneal the scores as you go outward into the occlusion block
|
||||
new_scores = np.ones((boxsize, boxsize))
|
||||
new_scores *= score
|
||||
new_scores = self._gamma_anneal(new_scores)
|
||||
|
||||
# For each pixel, update only where the new score is lower
|
||||
original_scores = heatmap[x: x+boxsize, y: y+boxsize]
|
||||
|
||||
target_area = np.where(new_scores < original_scores, new_scores, original_scores)
|
||||
heatmap[x: x+boxsize, y: y+boxsize] = target_area
|
||||
else:
|
||||
break
|
||||
|
||||
return heatmap, worst_score
|
||||
|
||||
def _gamma_anneal(self, occlusion_area):
|
||||
""" Get the annealed score based on centeredness of the occlusion area """
|
||||
width, height = occlusion_area.shape
|
||||
|
||||
center_x = (width-1) / 2
|
||||
center_y = (height-1) / 2
|
||||
|
||||
annealed_area = np.zeros(occlusion_area.shape)
|
||||
|
||||
for (x, y), score in np.ndenumerate(occlusion_area):
|
||||
distance = math.sqrt((center_x - x)**2 + (center_y - y)**2)
|
||||
annealed_area[x, y] = min(255, score + (self.gamma * distance))
|
||||
|
||||
return annealed_area
|
||||
|
||||
def _occlude(self, boxsize):
|
||||
''' Return a single occluded image and its location '''
|
||||
if self.x + boxsize > self.screenshot.shape[0]:
|
||||
return None, None, None
|
||||
|
||||
retImg = np.copy(self.screenshot)
|
||||
retImg[self.x:self.x+boxsize, self.y:self.y+boxsize] = 0.0
|
||||
|
||||
old_i = deepcopy(self.x)
|
||||
old_j = deepcopy(self.y)
|
||||
|
||||
# update indices
|
||||
self.y = self.y + self.step
|
||||
if self.y+boxsize > self.screenshot.shape[1]: # reached end
|
||||
self.y = 0 # reset j
|
||||
self.x = self.x + self.step # go to next row
|
||||
|
||||
return retImg, old_i, old_j
|
||||
@@ -0,0 +1,190 @@
|
||||
<!DOCTYPE HTML>
|
||||
<meta charset="utf-8"/>
|
||||
<html>
|
||||
<title>Eyeballer Results</title>
|
||||
<body>
|
||||
<div id="btnsCont">
|
||||
<button class="btn all" onclick="filterSelection('all')"> Show all</button>
|
||||
<button class="btn" onclick="filterSelection('custom404')"> 404</button>
|
||||
<button class="btn" onclick="filterSelection('login')"> Login</button>
|
||||
<button class="btn" onclick="filterSelection('webapp')"> Web Application</button>
|
||||
<button class="btn" onclick="filterSelection('oldlooking')"> Old Looking</button>
|
||||
<button class="btn" onclick="filterSelection('parked')"> Parked Domain</button>
|
||||
<select onchange="numOnPage=this.value; filterSelection([]);" style="float:right; margin:5px; margin-right:30px; height:30px; width:auto;">
|
||||
<option value="25">25</option>
|
||||
<option value="50">50</option>
|
||||
<option value="100">100</option>
|
||||
<option value="250">250</option>
|
||||
</select>
|
||||
</div>
|
||||
<div id="btnsPage">
|
||||
</div>
|
||||
<div id="container">
|
||||
</div>
|
||||
<button onclick="topFunction()" id="topBtn" title="Go to top">Top</button>
|
||||
<script>
|
||||
var results = {{jsResults}};
|
||||
var selectedTags = new Array();
|
||||
var btnContainer = document.getElementById("btnsCont");
|
||||
var categoryBtns = btnContainer.getElementsByClassName("btn");
|
||||
var numOnPage = 100;
|
||||
var indexesToDisplay = [];
|
||||
filterSelection([]);
|
||||
for (var i = 0; i < categoryBtns.length; i++) {
|
||||
categoryBtns[i].addEventListener("click", function () {
|
||||
if (this.className.indexOf("active") > -1) {
|
||||
this.className = this.className.replace(" active", "");
|
||||
}
|
||||
else {
|
||||
this.className += " active";
|
||||
}
|
||||
});
|
||||
}
|
||||
function filterSelection(c) {
|
||||
indexesToDisplay = [];
|
||||
var currentIndex = -1;
|
||||
if (c == "all") location.reload();
|
||||
if (selectedTags.includes(c)!=true) selectedTags=selectedTags.concat(c);
|
||||
else selectedTags.splice(selectedTags.indexOf(c),1);
|
||||
for (var filename in results){
|
||||
currentIndex++;
|
||||
var tags = results[filename];
|
||||
var isMissingTag = false;
|
||||
for (var i in selectedTags){
|
||||
if (!tags.includes(selectedTags[i])){
|
||||
isMissingTag = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if (isMissingTag === false){
|
||||
indexesToDisplay = indexesToDisplay.concat(currentIndex);
|
||||
}
|
||||
}
|
||||
buildPageButtons(indexesToDisplay);
|
||||
buildHTML(0, numOnPage);
|
||||
}
|
||||
function buildPageButtons(indexes){
|
||||
numOfPages = Math.ceil(indexes.length/numOnPage);
|
||||
var html = '';
|
||||
for (var i = 0; i < numOfPages; i++){
|
||||
html += ('<button class="btnpage" onclick="buildHTML(' + (i*numOnPage) + ', ' + ((i+1)*numOnPage) + '); activatePage(this);">' + (i+1) +'</button>');
|
||||
}
|
||||
document.getElementById('btnsPage').innerHTML = html;
|
||||
}
|
||||
function activatePage(pressedBtn){
|
||||
var activeNow = document.getElementsByClassName('activePage')
|
||||
for (var i = 0; i < activeNow.length; i++){
|
||||
activeNow[i].className = activeNow[i].className.replace(" activePage", "");
|
||||
}
|
||||
pressedBtn.className += ' activePage';
|
||||
}
|
||||
function buildHTML(rangeMin, rangeMax){
|
||||
var html = '';
|
||||
if (rangeMax > indexesToDisplay.length) rangeMax=indexesToDisplay.length;
|
||||
for (var i = rangeMin; i < rangeMax; i++){
|
||||
index=indexesToDisplay[i];
|
||||
filename = Object.keys(results)[index];
|
||||
html += ('<div class="filterDiv"><a href=' + filename + ' target="_blank"> ' + results[filename].toString().replace(/,/g, ' ') + '</a><img class="res_pic" src="' + filename + '"></div>');
|
||||
}
|
||||
document.getElementById('container').innerHTML = html;
|
||||
}
|
||||
window.onscroll = function() {scrollFunction()};
|
||||
function scrollFunction() {
|
||||
if (document.body.scrollTop > 20 || document.documentElement.scrollTop > 20) {
|
||||
document.getElementById("topBtn").style.display = "block";
|
||||
} else {
|
||||
document.getElementById("topBtn").style.display = "none";
|
||||
}
|
||||
}
|
||||
function topFunction() {
|
||||
document.body.scrollTop = 0; // For Safari
|
||||
document.documentElement.scrollTop = 0; // For Chrome, Firefox, IE and Opera
|
||||
}
|
||||
</script>
|
||||
<style>
|
||||
#topBtn {
|
||||
display: none; /* Hidden by default */
|
||||
position: fixed; /* Fixed/sticky position */
|
||||
bottom: 20px; /* Place the button at the bottom of the page */
|
||||
right: 30px; /* Place the button 30px from the right */
|
||||
z-index: 99; /* Make sure it does not overlap */
|
||||
border: none; /* Remove borders */
|
||||
outline: none; /* Remove outline */
|
||||
background-color: #193b72; /* Set a background color */
|
||||
color: white; /* Text color */
|
||||
cursor: pointer; /* Add a mouse pointer on hover */
|
||||
padding: 15px; /* Some padding */
|
||||
border-radius: 10px; /* Rounded corners */
|
||||
font-size: 18px; /* Increase font size */
|
||||
font-weight:bold;
|
||||
border:solid;
|
||||
}
|
||||
#topBtn:hover {
|
||||
background-color: #555;
|
||||
}
|
||||
.container {
|
||||
overflow: hidden;
|
||||
}
|
||||
#btnsPage {
|
||||
margin:10px;
|
||||
}
|
||||
.btnpage{
|
||||
width:40px;
|
||||
height:30px;
|
||||
background-color: #f1f1f1;
|
||||
outline: none;
|
||||
}
|
||||
.res_pic{
|
||||
width:100%;
|
||||
height:auto;
|
||||
}
|
||||
a{
|
||||
font-weight:600;
|
||||
padding:3px;
|
||||
text-decoration: none;
|
||||
color:#ffffff;
|
||||
font-size:16px;
|
||||
font-family:Sans-serif;
|
||||
}
|
||||
.name{
|
||||
float:left;
|
||||
}
|
||||
.filterDiv {
|
||||
float: left;
|
||||
background-color: #777;
|
||||
color: #ffffff;
|
||||
width: 22%;
|
||||
border-style:solid;
|
||||
border-color:#666;
|
||||
text-align: center;
|
||||
margin: 10px;
|
||||
line-height: 30px;
|
||||
display: block;
|
||||
}
|
||||
.btn {
|
||||
border: none;
|
||||
outline: none;
|
||||
padding: 12px 16px;
|
||||
margin-left:10px;
|
||||
background-color: #f1f1f1;
|
||||
cursor: pointer;
|
||||
}
|
||||
.btn:hover {
|
||||
background-color: #ddd;
|
||||
}
|
||||
.active {
|
||||
background-color: #666;
|
||||
color: white;
|
||||
}
|
||||
.activePage{
|
||||
border: solid;
|
||||
border-color:#666666;
|
||||
color: black;
|
||||
}
|
||||
.btn.all {
|
||||
background-color: #193b72;
|
||||
color: white;
|
||||
}
|
||||
</style>
|
||||
</body>
|
||||
</html>
|
||||
@@ -0,0 +1,10 @@
|
||||
Augmentor
|
||||
click
|
||||
matplotlib
|
||||
numpy
|
||||
pandas
|
||||
pillow
|
||||
sklearn
|
||||
tensorflow-gpu
|
||||
jinja2
|
||||
progressbar2
|
||||
@@ -0,0 +1,10 @@
|
||||
Augmentor
|
||||
click
|
||||
matplotlib
|
||||
numpy
|
||||
pandas
|
||||
pillow
|
||||
sklearn
|
||||
tensorflow
|
||||
jinja2
|
||||
progressbar2
|
||||
@@ -1,21 +0,0 @@
|
||||
from setuptools import find_packages, setup
|
||||
|
||||
setup(
|
||||
name='eyeballer',
|
||||
version='0.0.1',
|
||||
packages=find_packages(exclude=["tests"]),
|
||||
url='https://github.com/BishopFox/eyeballer',
|
||||
license='GNU General Public License v3.0',
|
||||
author='Daniel Petro',
|
||||
author_email='',
|
||||
description='',
|
||||
install_requires=[
|
||||
'keras',
|
||||
'sklearn',
|
||||
'numpy',
|
||||
'pandas',
|
||||
'matplotlib',
|
||||
'pillow'
|
||||
],
|
||||
test_requires=[],
|
||||
)
|
||||
@@ -0,0 +1,142 @@
|
||||
import errno
|
||||
import os
|
||||
import unittest
|
||||
import sys
|
||||
|
||||
from eyeballer.model import EyeballModel
|
||||
from eyeballer.visualization import HeatMap
|
||||
|
||||
|
||||
class PredictTest(unittest.TestCase):
|
||||
def setUp(self):
|
||||
|
||||
class DummyFile(object):
|
||||
def write(self, x): pass
|
||||
def flush(self): pass
|
||||
|
||||
sys.stdout = DummyFile()
|
||||
weights_file = "tests/models/test_weights.h5"
|
||||
if not os.path.isfile(weights_file):
|
||||
print("Error: Symlink the latest weights file to " + weights_file)
|
||||
raise FileNotFoundError(
|
||||
errno.ENOENT,
|
||||
os.strerror(errno.ENOENT),
|
||||
weights_file)
|
||||
|
||||
model_kwargs = {
|
||||
"weights_file": weights_file,
|
||||
"print_summary": False,
|
||||
"seed": None,
|
||||
"quiet": True
|
||||
}
|
||||
self.model = EyeballModel(**model_kwargs)
|
||||
|
||||
def test_different_seed_predict(self):
|
||||
model_kwargs = {
|
||||
"weights_file": None,
|
||||
"print_summary": False,
|
||||
"seed": 12345678,
|
||||
"quiet": True
|
||||
}
|
||||
same_seed_model = EyeballModel(**model_kwargs)
|
||||
|
||||
screenshot = "tests/data/404.png"
|
||||
|
||||
results_one = self.model.predict(screenshot)
|
||||
results_two = same_seed_model.predict(screenshot)
|
||||
|
||||
self.assertNotEqual(results_one, results_two)
|
||||
|
||||
def test_same_seed_predict(self):
|
||||
model_kwargs = {
|
||||
"weights_file": None,
|
||||
"print_summary": False,
|
||||
"seed": 12345678,
|
||||
"quiet": True
|
||||
}
|
||||
same_seed_model = EyeballModel(**model_kwargs)
|
||||
|
||||
screenshot = "tests/data/404.png"
|
||||
|
||||
results_one = same_seed_model.predict(screenshot)
|
||||
results_two = same_seed_model.predict(screenshot)
|
||||
|
||||
self.assertEqual(results_one, results_two)
|
||||
|
||||
def test_predict_custom404(self):
|
||||
screenshot = "tests/data/404.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertGreater(results["custom404"], 0.5)
|
||||
|
||||
def test_predict_not_custom404(self):
|
||||
screenshot = "tests/data/nothing.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertLess(results["custom404"], 0.5)
|
||||
|
||||
def test_predict_login(self):
|
||||
screenshot = "tests/data/login.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertGreater(results["login"], 0.5)
|
||||
|
||||
def test_predict_not_login(self):
|
||||
screenshot = "tests/data/nothing.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
print(screenshot, results)
|
||||
self.assertLess(results["login"], 0.5)
|
||||
|
||||
def test_predict_homepage(self):
|
||||
screenshot = "tests/data/homepage.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertGreater(results["homepage"], 0.5)
|
||||
|
||||
def test_predict_not_homepage(self):
|
||||
screenshot = "tests/data/nothing.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertLess(results["homepage"], 0.5)
|
||||
|
||||
def test_predict_oldlooking(self):
|
||||
screenshot = "tests/data/old-looking.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertGreater(results["oldlooking"], 0.5)
|
||||
|
||||
def test_predict_not_oldlooking(self):
|
||||
screenshot = "tests/data/nothing.png"
|
||||
results = self.model.predict(screenshot)[0]
|
||||
self.assertLess(results["oldlooking"], 0.5)
|
||||
|
||||
def test_file_doesnt_exist(self):
|
||||
screenshot = "tests/data/doesnotexist.png"
|
||||
try:
|
||||
self.model.predict(screenshot)[0]
|
||||
self.fail("FileNotFoundError was expected but not found")
|
||||
except FileNotFoundError:
|
||||
pass
|
||||
|
||||
def test_folder(self):
|
||||
screenshots = "tests/data/"
|
||||
results = self.model.predict(screenshots)
|
||||
self.assertEqual(len(results), 7)
|
||||
|
||||
def test_file_is_empty(self):
|
||||
"""
|
||||
We're just testing that it doesn't crash, basically
|
||||
"""
|
||||
screenshot = "tests/data/empty.png"
|
||||
self.model.predict(screenshot)
|
||||
|
||||
def test_file_is_invalid(self):
|
||||
"""
|
||||
We're just testing that it doesn't crash, basically
|
||||
"""
|
||||
screenshot = "tests/data/invalid.png"
|
||||
self.model.predict(screenshot)
|
||||
|
||||
def test_heatmap(self):
|
||||
screenshot = "tests/data/login.png"
|
||||
HeatMap(screenshot, self.model, 0.5)
|
||||
|
||||
screenshot = "tests/data/404.png"
|
||||
HeatMap(screenshot, self.model, 0.5)
|
||||
|
||||
screenshot = "tests/data/empty.png"
|
||||
HeatMap(screenshot, self.model, 0.5)
|
||||
@@ -0,0 +1 @@
|
||||
from tests.PredictTest import * # noqa
|
||||
|
After Width: | Height: | Size: 101 KiB |
|
After Width: | Height: | Size: 479 KiB |
@@ -0,0 +1 @@
|
||||
THIS TEXT IS NOT A VALID PNG
|
||||
|
After Width: | Height: | Size: 27 KiB |
|
After Width: | Height: | Size: 10 KiB |
|
After Width: | Height: | Size: 202 B |
|
After Width: | Height: | Size: 347 KiB |
|
After Width: | Height: | Size: 277 B |
@@ -0,0 +1,37 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import csv
|
||||
import random
|
||||
import json
|
||||
|
||||
with open("newlabels.csv", "w", newline="") as csvfile:
|
||||
# Open the old labels file
|
||||
with open("labelbox.csv", newline="") as oldfile:
|
||||
# Get the header labels
|
||||
csvreader = csv.DictReader(oldfile)
|
||||
fieldnames = next(csvreader)
|
||||
labelwriter = csv.DictWriter(csvfile, fieldnames=["filename", "login", "custom404", "homepage", "oldlooking", "evaluation"])
|
||||
labelwriter.writeheader()
|
||||
|
||||
# Loop through the file
|
||||
rows = []
|
||||
for row in csvreader:
|
||||
filename = row["External ID"]
|
||||
print(row["Label"])
|
||||
labelstring = row["Label"]
|
||||
if row["Label"] == "Skip":
|
||||
labelstring = '{"imageclassification":[]}'
|
||||
labels = json.loads(labelstring)
|
||||
|
||||
newrow = dict()
|
||||
newrow["filename"] = filename
|
||||
newrow["oldlooking"] = True
|
||||
newrow["login"] = "loginpage" in labels["imageclassification"]
|
||||
newrow["homepage"] = "homepage" in labels["imageclassification"]
|
||||
newrow["custom404"] = "custom404"in labels["imageclassification"]
|
||||
|
||||
newrow["evaluation"] = random.random() > 0.8
|
||||
|
||||
rows.append(newrow)
|
||||
labelwriter.writerows(rows)
|
||||
print("Made new labels file: newlabels.csv")
|
||||
@@ -0,0 +1,21 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import csv
|
||||
import random
|
||||
|
||||
with open("newlabels.csv", "w", newline="") as csvfile:
|
||||
# Open the old labels file
|
||||
with open("labels.csv", newline="") as oldfile:
|
||||
# Get the header labels
|
||||
csvreader = csv.DictReader(oldfile)
|
||||
fieldnames = next(csvreader)
|
||||
labelwriter = csv.DictWriter(csvfile, fieldnames=fieldnames)
|
||||
labelwriter.writeheader()
|
||||
|
||||
# Loop through the file
|
||||
rows = []
|
||||
for row in csvreader:
|
||||
row["evaluation"] = random.random() > 0.8
|
||||
rows.append(row)
|
||||
labelwriter.writerows(rows)
|
||||
print("Made new labels file: newlabels.csv")
|
||||
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Converts full-size images to a given size (replacing the originals)
|
||||
for f in images/*
|
||||
do
|
||||
echo $f
|
||||
convert -resize 224x224\! $f $f
|
||||
done
|
||||
@@ -0,0 +1,28 @@
|
||||
#!/usr/bin/env python3
|
||||
|
||||
import csv
|
||||
import random
|
||||
from os import listdir
|
||||
from os.path import isfile, join
|
||||
|
||||
with open("labels.csv", newline="") as csvfile:
|
||||
# Get the header labels
|
||||
csvreader = csv.DictReader(csvfile)
|
||||
# fieldnames = next(csvreader)
|
||||
file_list = [f for f in listdir("images") if isfile(join("images", f))]
|
||||
|
||||
label_list = []
|
||||
for row in csvreader:
|
||||
label_list.append(row["filename"])
|
||||
|
||||
# Loop through the file
|
||||
print("Rows in labels.csv, but no image exists:")
|
||||
for label in label_list:
|
||||
if label not in file_list:
|
||||
print(row["filename"])
|
||||
|
||||
print("Images that exist, but don't have labels:")
|
||||
i = 0
|
||||
for image in file_list:
|
||||
if image not in label_list:
|
||||
print(image)
|
||||