mirror of
https://github.com/Ekultek/Zeus-Scanner.git
synced 2026-03-11 08:55:51 +00:00
111 lines
3.4 KiB
Python
111 lines
3.4 KiB
Python
import json
|
|
|
|
import requests
|
|
from xml.dom import minidom
|
|
|
|
from lib.core.settings import (
|
|
logger, set_color,
|
|
HEADER_XML_DATA,
|
|
proxy_string_to_dict,
|
|
create_random_ip,
|
|
write_to_log_file,
|
|
HEADER_RESULT_PATH,
|
|
replace_http,
|
|
PROTECTED
|
|
)
|
|
|
|
|
|
def load_xml_data(path, start_node="header", search_node="name"):
|
|
"""
|
|
load the XML data
|
|
"""
|
|
retval = []
|
|
fetched_xml = minidom.parse(path)
|
|
item_list = fetched_xml.getElementsByTagName(start_node)
|
|
for value in item_list:
|
|
retval.append(value.attributes[search_node].value)
|
|
return retval
|
|
|
|
|
|
def load_headers(url, **kwargs):
|
|
"""
|
|
load the URL headers
|
|
"""
|
|
agent = kwargs.get("agent", None)
|
|
proxy = kwargs.get("proxy", None)
|
|
xforward = kwargs.get("xforward", False)
|
|
|
|
if proxy is not None:
|
|
proxy = proxy_string_to_dict(proxy)
|
|
if not xforward:
|
|
header_value = {
|
|
"connection": "close",
|
|
"user-agent": agent
|
|
}
|
|
else:
|
|
ip_list = create_random_ip(), create_random_ip(), create_random_ip()
|
|
header_value = {
|
|
"connection": "close",
|
|
"user-agent": agent,
|
|
"X-Forwarded-For": "{}, {}, {}".format(
|
|
ip_list[0], ip_list[1], ip_list[2]
|
|
)
|
|
}
|
|
req = requests.get(url, params=header_value, proxies=proxy)
|
|
return req.headers
|
|
|
|
|
|
def compare_headers(found_headers, comparable_headers):
|
|
"""
|
|
compare the headers against one another
|
|
"""
|
|
retval = set()
|
|
for header in comparable_headers:
|
|
if header in found_headers:
|
|
retval.add(header)
|
|
return retval
|
|
|
|
|
|
def main_header_check(url, **kwargs):
|
|
"""
|
|
main function
|
|
"""
|
|
verbose = kwargs.get("verbose", False)
|
|
agent = kwargs.get("agent", None)
|
|
proxy = kwargs.get("proxy", None)
|
|
xforward = kwargs.get("xforward", False)
|
|
|
|
protection = {"hostname": url}
|
|
definition = {
|
|
"x-xss": ("protection against XSS attacks", "XSS"),
|
|
"strict-transport": ("protection against unencrypted connections (force HTTPS connection)", "HTTPS"),
|
|
"x-frame": ("protection against clickjacking vulnerabilities", "CLICKJACKING"),
|
|
"x-content": ("protection against MIME type attacks", "MIME"),
|
|
"content-security": ("protection against multiple attacks", "ALL")
|
|
}
|
|
if verbose:
|
|
logger.debug(set_color(
|
|
"loading XML data...", level=10
|
|
))
|
|
comparable_headers = load_xml_data(HEADER_XML_DATA)
|
|
logger.info(set_color(
|
|
"attempting to get request headers for '{}'...".format(url)
|
|
))
|
|
found_headers = load_headers(url, proxy=proxy, agent=agent, xforward=xforward)
|
|
if verbose:
|
|
logger.debug(set_color(
|
|
"fetched {}...".format(found_headers), level=10
|
|
))
|
|
headers_established = [str(h) for h in compare_headers(found_headers, comparable_headers)]
|
|
for key in definition.iterkeys():
|
|
if any(key in h.lower() for h in headers_established):
|
|
logger.warning(set_color(
|
|
"provided target has {}...".format(definition[key][0]), level=30
|
|
))
|
|
else:
|
|
logger.info(set_color(
|
|
"provided target does not have {}...".format(definition[key][0])
|
|
))
|
|
for key in found_headers.iterkeys():
|
|
protection[key] = found_headers[key]
|
|
return write_to_log_file(protection, HEADER_RESULT_PATH, "{}-headers.json".format(replace_http(url)))
|