mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-01-26 09:14:07 +03:00
New WAF script (SiteGuard)
This commit is contained in:
parent
c94bddd924
commit
02d66db7e0
|
@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME
|
||||||
from lib.core.enums import OS
|
from lib.core.enums import OS
|
||||||
|
|
||||||
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
|
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
|
||||||
VERSION = "1.3.1.42"
|
VERSION = "1.3.1.43"
|
||||||
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
|
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
|
||||||
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
|
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
|
||||||
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
|
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
|
||||||
|
|
|
@ -49,7 +49,7 @@ fe370021c6bc99daf44b2bfc0d1effb3 lib/core/patch.py
|
||||||
9a7d68d5fa01561500423791f15cc676 lib/core/replication.py
|
9a7d68d5fa01561500423791f15cc676 lib/core/replication.py
|
||||||
3179d34f371e0295dd4604568fb30bcd lib/core/revision.py
|
3179d34f371e0295dd4604568fb30bcd lib/core/revision.py
|
||||||
d6269c55789f78cf707e09a0f5b45443 lib/core/session.py
|
d6269c55789f78cf707e09a0f5b45443 lib/core/session.py
|
||||||
da97136510824fdec55455dde8c674c3 lib/core/settings.py
|
c6bb49602e081b6ad551053145b95f52 lib/core/settings.py
|
||||||
a8a7501d1e6b21669b858a62e921d191 lib/core/shell.py
|
a8a7501d1e6b21669b858a62e921d191 lib/core/shell.py
|
||||||
5dc606fdf0afefd4b305169c21ab2612 lib/core/subprocessng.py
|
5dc606fdf0afefd4b305169c21ab2612 lib/core/subprocessng.py
|
||||||
eec3080ba5baca44c6de4595f1c92a0d lib/core/target.py
|
eec3080ba5baca44c6de4595f1c92a0d lib/core/target.py
|
||||||
|
@ -399,7 +399,7 @@ ca3ab78d6ed53b7f2c07ed2530d47efd udf/postgresql/windows/32/8.4/lib_postgresqlud
|
||||||
d6f06b1463501392e7e578d511ffb4d8 waf/360.py
|
d6f06b1463501392e7e578d511ffb4d8 waf/360.py
|
||||||
2d63c46bed78aec2966a363d5db800fd waf/aesecure.py
|
2d63c46bed78aec2966a363d5db800fd waf/aesecure.py
|
||||||
b6bc83ae9ea69cf96e9389bde8250c7c waf/airlock.py
|
b6bc83ae9ea69cf96e9389bde8250c7c waf/airlock.py
|
||||||
8dcba3e7509e87e7829f445299bd2d3b waf/anquanbao.py
|
34b8ec9f438d7daa56aa016e6c09fadb waf/anquanbao.py
|
||||||
7ab1a7cd51a02899592f4f755d36a02e waf/approach.py
|
7ab1a7cd51a02899592f4f755d36a02e waf/approach.py
|
||||||
425f2599f57ab81b4fff67e6b442cccc waf/armor.py
|
425f2599f57ab81b4fff67e6b442cccc waf/armor.py
|
||||||
33b6e6793ed3add457d7c909ec599ad3 waf/asm.py
|
33b6e6793ed3add457d7c909ec599ad3 waf/asm.py
|
||||||
|
@ -451,7 +451,8 @@ d2d9718de217dd07d9e66b2e6ad61380 waf/safe3.py
|
||||||
ac0728ddb7a15b46b0eabd78cd661f8c waf/secureiis.py
|
ac0728ddb7a15b46b0eabd78cd661f8c waf/secureiis.py
|
||||||
ba37e1c37fa0e3688873f74183a9cb9c waf/senginx.py
|
ba37e1c37fa0e3688873f74183a9cb9c waf/senginx.py
|
||||||
2602a8baed4da643e606a379e4dc75db waf/shieldsecurity.py
|
2602a8baed4da643e606a379e4dc75db waf/shieldsecurity.py
|
||||||
24f1cc66625e58e4c91c0cb4364a2202 waf/sitelock.py
|
332f27cfa02abca513719851850c782e waf/siteguard.py
|
||||||
|
c842d298e61a87b32668c8402a0d87b5 waf/sitelock.py
|
||||||
a840fcd2bb042694f9aab2859e7c9b30 waf/sonicwall.py
|
a840fcd2bb042694f9aab2859e7c9b30 waf/sonicwall.py
|
||||||
45683bfe7a428f47745416c727a789bd waf/sophos.py
|
45683bfe7a428f47745416c727a789bd waf/sophos.py
|
||||||
4a11ba8e5f3995b35f5fc189b8c2692e waf/stackpath.py
|
4a11ba8e5f3995b35f5fc189b8c2692e waf/stackpath.py
|
||||||
|
|
|
@ -5,8 +5,6 @@ Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
|
||||||
See the file 'LICENSE' for copying permission
|
See the file 'LICENSE' for copying permission
|
||||||
"""
|
"""
|
||||||
|
|
||||||
import re
|
|
||||||
|
|
||||||
from lib.core.settings import WAF_ATTACK_VECTORS
|
from lib.core.settings import WAF_ATTACK_VECTORS
|
||||||
|
|
||||||
__product__ = "Anquanbao Web Application Firewall (Anquanbao)"
|
__product__ = "Anquanbao Web Application Firewall (Anquanbao)"
|
||||||
|
|
21
waf/siteguard.py
Normal file
21
waf/siteguard.py
Normal file
|
@ -0,0 +1,21 @@
|
||||||
|
#!/usr/bin/env python
|
||||||
|
|
||||||
|
"""
|
||||||
|
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
|
||||||
|
See the file 'LICENSE' for copying permission
|
||||||
|
"""
|
||||||
|
|
||||||
|
from lib.core.settings import WAF_ATTACK_VECTORS
|
||||||
|
|
||||||
|
__product__ = "SiteGuard (JP-Secure)"
|
||||||
|
|
||||||
|
def detect(get_page):
|
||||||
|
retval = False
|
||||||
|
|
||||||
|
for vector in WAF_ATTACK_VECTORS:
|
||||||
|
page, _, _ = get_page(get=vector)
|
||||||
|
retval = any(_ in (page or "") for _ in ("Powered by SiteGuard", "The server refuse to browse the page"))
|
||||||
|
if retval:
|
||||||
|
break
|
||||||
|
|
||||||
|
return retval
|
|
@ -15,7 +15,7 @@ def detect(get_page):
|
||||||
|
|
||||||
for vector in WAF_ATTACK_VECTORS:
|
for vector in WAF_ATTACK_VECTORS:
|
||||||
page, _, _ = get_page(get=vector)
|
page, _, _ = get_page(get=vector)
|
||||||
retval |= any(_ in (page or "") for _ in ("SiteLock Incident ID", '<span class="value INCIDENT_ID">'))
|
retval = any(_ in (page or "") for _ in ("SiteLock Incident ID", '<span class="value INCIDENT_ID">'))
|
||||||
if retval:
|
if retval:
|
||||||
break
|
break
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user