removed the gist lookup, it will be reimplemented in the furture, but for now there's to many problems with it (issue #285)

This commit is contained in:
ekultek 2017-12-15 09:46:36 -06:00
parent f0056a0133
commit 1bfac89266
5 changed files with 11 additions and 19 deletions

View file

@ -1,4 +1,4 @@
c3ef86ef033a88aa00d016465eeeb339 ./zeus.py
3b0a5426c8724d90777250df385f6d08 ./zeus.py
4b32db388e8acda35570c734d27c950c ./etc/scripts/launch_sqlmap.sh
6ad5f22ec4a6f8324bfb1b01ab6d51ec ./etc/scripts/cleanup.sh
74d7bee13890a9dd279bb857591647ce ./etc/scripts/reinstall.sh
@ -102,13 +102,13 @@ c5b69617f040fef1d5930948905aa8d0 ./lib/attacks/whois_lookup/whois.py
352b3740b54ef13b77ec57e9e68372b5 ./lib/attacks/xss_scan/__init__.py
40ba04fb18dcbb81cb42376a825c238f ./lib/attacks/nmap_scan/__init__.py
216999fa0e84866d5c1d96d5676034e4 ./lib/attacks/nmap_scan/nmap_opts.py
daab1cac629a5f59abfeb510d0cb9b67 ./lib/header_check/__init__.py
0114ebe3d45612ef143f2777f027374c ./lib/header_check/__init__.py
2a8acb2191d80da75f0e4d09c00df9f6 ./lib/core/common.py
de4254c5e40f7aa4fb81e0608f758a2c ./lib/core/decorators.py
4433353fb5c55578391d8b4006191ee8 ./lib/core/errors.py
d41d8cd98f00b204e9800998ecf8427e ./lib/core/__init__.py
dea39468fdc8d863cab459d03468b3a2 ./lib/core/settings.py
afc8dc07dfdac4f70795ba718832f5a6 ./lib/core/parse.py
42508178b7e1ad73096bc6c34be412cc ./lib/core/settings.py
28b94f316ad528cdfba77694b4e52c81 ./lib/core/parse.py
d41d8cd98f00b204e9800998ecf8427e ./var/__init__.py
d41d8cd98f00b204e9800998ecf8427e ./var/auto_issue/__init__.py
8e9092a4783a2d82f49c2dd824f11950 ./var/auto_issue/github.py

View file

@ -71,7 +71,7 @@ class ZeusParser(OptionParser):
help="Perform a clickjacking scan on a provided URL")
attacks.add_option("-g", "--github-search", dest="searchGithub", action="store_true",
help="Perform a Github Gist search for any information on the found websites")
help=SUPPRESS_HELP)
attacks.add_option("-P", "--pgp", dest="pgpLookup", action="store_true",
help="Perform a PGP public key lookup on the found URLs")

View file

@ -284,13 +284,6 @@ AUTHORIZED_SEARCH_ENGINES = {
"pgp": "https://pgp.mit.edu/pks/lookup?search={}&op=index"
}
# search page for Gists and rate checking URL
GITHUB_GIST_SEARCH_URLS = {
"search": "https://api.github.com/gists/public?page={}&per_page=100",
"check_rate": "https://api.github.com/users/ZeusIssueReporter"
}
# extensions to exclude from the spider
SPIDER_EXT_EXCLUDE = (
"3ds", "3g2", "3gp", "7z", "DS_Store", "a", "aac", "adp", "ai", "aif", "aiff",
@ -935,7 +928,7 @@ def run_attacks(url, **kwargs):
verbose = kwargs.get("verbose", False)
whois = kwargs.get("whois", False)
clickjacking = kwargs.get("clickjacking", False)
github = kwargs.get("github", False)
# github = kwargs.get("github", False)
pgp = kwargs.get("pgp", False)
auto_start = kwargs.get("auto_start", False)
sqlmap_arguments = kwargs.get("sqlmap_args", None)
@ -1023,10 +1016,10 @@ def run_attacks(url, **kwargs):
if check_for_protection(PROTECTED, "clickjacking"):
clickjacking_main(url, agent=agent, proxy=proxy,
forward=forwarded, batch=batch)
elif github:
from lib.attacks.gist_lookup import github_gist_search_main
query = replace_http(url)
github_gist_search_main(query, agent=agent, proxy=proxy, verbose=verbose)
# elif github:
# from lib.attacks.gist_lookup import github_gist_search_main
# query = replace_http(url)
# github_gist_search_main(query, agent=agent, proxy=proxy, verbose=verbose)
elif pgp:
from var.search.pgp_search import pgp_main
pgp_main(url, verbose=verbose)

View file

@ -17,7 +17,6 @@ from lib.core.common import (
pause,
get_page,
HTTP_HEADER,
STATUS_CODES
)
from lib.core.settings import (
logger, set_color,

View file

@ -96,7 +96,7 @@ if __name__ == "__main__":
opt.runSqliScan, opt.runPortScan,
opt.adminPanelFinder, opt.runXssScan,
opt.performWhoisLookup, opt.performClickjackingScan,
opt.searchGithub, opt.pgpLookup
opt.pgpLookup
]
if any(options):
with open(urls_to_use) as urls: