def run(self):
""" Run """
info('Checking PHP Code Injection...')
URL = None
DATA = None
PAYLOAD = None
for payload in php():
# post method
if self.data:
# data add payload
rPayload = preplace(self.url, payload, self.data)
for data in rPayload.run():
# split payload
if "\"" in payload:
payload = payload.split('"')[1]
# send request
req = self.Send(url=self.url, method=self.post, data=data)
# search payload in req.content
if search(r"root\:\/bin\/bash|" + payload,
str(req.content)):
URL = req.url
DATA = data
PAYLOAD = payload
break
# get method
else:
# url query add payload
urls = preplace(self.url, payload, None)
for url in urls.run():
# split payload
if "\"" in payload:
payload = payload.split('"')[1]
# send request
req = self.Send(url=url, method=self.get)
# search payload in req.content
if search(r"root\:\/bin\/bash|" + payload,
str(req.content)):
URL = url
PAYLOAD = payload
break
# if URL and PAYLOAD not empty
if URL and PAYLOAD:
# print
if DATA != None:
plus(
"A potential \"PHP Code Injection\" was found at:")
more("URL: {}".format(URL))
more("POST DATA: {}".format(DATA))
more("PAYLOAD: {}".format(PAYLOAD))
elif DATA == None:
plus(
"A potential \"PHP Code Injection\" was found at:")
more("URL: {}".format(URL))
more("PAYLOAD: {}".format(PAYLOAD))
# break
break
def run(self):
""" Run """
info('Checking PHP Code Injection...')
URL = None
DATA = None
PAYLOAD = None
for payload in php():
# post method
if self.data:
# data add payload
rPayload = preplace(self.url, payload, self.data)
for data in rPayload.run():
# split payload
if "\"" in payload:
payload = payload.split('"')[1]
# send request
req = self.Send(url=self.url, method=self.post, data=data)
# search payload in req.content
if search(r"root\:\/bin\/bash|" + payload, req.content):
URL = req.url
DATA = data
PAYLOAD = payload
break
# get method
else:
# url query add payload
urls = preplace(self.url, payload, None)
for url in urls.run():
# split payload
if "\"" in payload:
payload = payload.split('"')[1]
# send request
req = self.Send(url=url, method=self.get)
# search payload in req.content
if search(r"root\:\/bin\/bash|" + payload, req.content):
URL = url
PAYLOAD = payload
break
# if URL and PAYLOAD not empty
if URL and PAYLOAD:
return True