prehistoric-systems/Zeus-Scanner
1
0
Fork 0
mirror of https://github.com/Ekultek/Zeus-Scanner.git synced 2026-03-11 08:55:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

will now save potential SQLi vulnerable websites to a log file during the header check (if the check throws a dbms error)

Browse source
This commit is contained in:
ekultek 2017-11-28 13:07:23 -06:00
parent 0253cb37e4
commit f3dd7c567b
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/header_check/__init__.py
View file

@ -30,7 +30,9 @@ from lib.core.settings import (
UNKNOWN_FIREWALL_FINGERPRINT_PATH,
UNKNOWN_FIREWALL_FILENAME,
COOKIE_FILENAME,
HEADERS_FILENAME
HEADERS_FILENAME,
SQLI_FOUND_FILENAME,
SQLI_SITES_FILEPATH
)
@ -77,8 +79,10 @@ def detect_protection(url, **kwargs):
if re.compile(regex).search(html) is not None:
logger.warning(set_color(
"it appears that the WAF/IDS/IPS check threw a DBMS error and may be vulnerable "
"to SQL injection attacks. it appears the backend DBMS is '{}'...".format(dbms), level=30
"to SQL injection attacks. it appears the backend DBMS is '{}', site will be "
"saved for further processing...".format(dbms), level=30
))
write_to_log_file(url, SQLI_SITES_FILEPATH, SQLI_FOUND_FILENAME)
return None
retval = []