From 2e42afea6f1b7e0ee4b954a27c000fc612433412 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 6 Jul 2016 23:43:21 +0200 Subject: [PATCH] Update of sucury WAF script --- lib/core/settings.py | 2 +- waf/sucuri.py | 6 ++++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 91fa6c0b8..b862643ab 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from lib.core.revision import getRevisionNumber # sqlmap version (...) -VERSION = "1.0.7.14" +VERSION = "1.0.7.15" REVISION = getRevisionNumber() STABLE = VERSION.count('.') <= 2 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") diff --git a/waf/sucuri.py b/waf/sucuri.py index 209842cbe..c43599fef 100644 --- a/waf/sucuri.py +++ b/waf/sucuri.py @@ -10,14 +10,16 @@ import re from lib.core.enums import HTTP_HEADER from lib.core.settings import WAF_ATTACK_VECTORS -__product__ = "Sucuri WebSite Firewall" +__product__ = "CloudProxy WebSite Firewall (Sucuri)" def detect(get_page): retval = False for vector in WAF_ATTACK_VECTORS: - _, headers, code = get_page(get=vector) + page, headers, code = get_page(get=vector) retval = code == 403 and re.search(r"Sucuri/Cloudproxy", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None + retval |= "Sucuri WebSite Firewall - CloudProxy - Access Denied" in (page or "") + retval |= re.search(r"Questions\?.+cloudproxy@sucuri\.net", (page or "")) is not None if retval: break