예제 #1
0
 def sqli_detect(self):
     from AutoSqli import AutoSqli
     try:
         t = AutoSqli(sqlmap_api_address, self.req_url, self.para_str, '',
                      self.cookie, self.request)
         t.deamon = True
         t.start()
     except Exception, e:
         print e
예제 #2
0
 def run(self):
     """
     Run the sqli detection using HTTPRequest object.
     """
     try:
         detecter = AutoSqli(SERVER, self.url, self.data, 
             self.referer, self.cookie, self.req_text) 
         detecter.deamon = True
         detecter.start()
     except Exception, e:
         print e
예제 #3
0
 def run(self):
     """
     Run the sqli detection using HTTPRequest object.
     """
     try:
         detecter = AutoSqli(SERVER, self.url, self.data, self.referer,
                             self.cookie, self.req_text)
         detecter.deamon = True
         detecter.start()
     except Exception, e:
         print e
            #print "[+]Well, you could check the reverse domain for result here.\n"
        elif self.detect_type == "ssrf":
            log_value = self.ssrf_detect()
            #此处无法添加可匹配的regx,可尝试检查reverse domain的结果
            #现在借助api已解决这类问题。
            #print "[+]Well, you could check the reverse domain for result here.\n"
        elif self.detect_type == "xxe":
            log_value = self.xxe_detect()

        elif self.detect_type == "sqli":
            from AutoSqli import AutoSqli
            try:
                t = AutoSqli(sqlmap_api_address, self.req_url, self.para_str,
                             '', self.cookie, self.request)
                t.deamon = True
                t.start()

            except Exception, e:
                print e
            log_value = False
            print "[+]Please wait for sqli time-delay detect.\n"
        else:
            return

        #print log_value
        if log_value != False and log_value != None:
            print "[!]Well. mabye success exploit here!\n"
            self.log_print(self.detect_type)
        #else:
        #    print "[+]Maybe no vulns or here, you can wait for time-delay detect.\n"