CyberExpTools/CyberExpTools.py at main · GgBoom-993/CyberExpTools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97


from init.HeaderVlun import HeaderVlun
from init.cmdline import parse_args
from init.PrintEntity import PrintEntity
from init.ExportEntity import ExportEntity


allVuln= {}

def scanSingle(url):

    ExportEntity()

    printEntity.showgreen("=>扫描Headers相关漏洞",printEntity.seatNum)
    headers=headerVlun.getHeaders(url)
    if not headers:return
    for key,value in headers.items():
        printEntity.showUnvipInfo2("\t   "+key+" : "+value)
    printEntity.printDefault(""+'- '*20)
    vulnresult1=headerVlun.getHeadersVuln(headers)

    printEntity.showgreen("=>扫描HTTP请求相关漏洞",printEntity.seatNum)
    vulnresult2=headerVlun.getOptionsVlun(url)

    printEntity.showgreen("=>扫描报错信息相关漏洞",printEntity.seatNum)
    vulnresult3=headerVlun.getErrorInfoVuln(url)

    printEntity.showgreen("=>扫描SSL相关漏洞", printEntity.seatNum)
    vulnresult4 = headerVlun.check_tls_version(url)

    printEntity.showgreen("=>扫描HTTP连接漏洞", printEntity.seatNum)
    vulnresult5 = headerVlun.check_http_access(url)

    allVuln.setdefault(url,vulnresult1+vulnresult2+vulnresult3+vulnresult4+vulnresult5)
    printEntity.printDefault(""+'_'*60)


if __name__ == '__main__':
    options=parse_args()
    print("█  DCExpTools: Welcome tester. Good luck to you.")

    printEntity=PrintEntity(1)#设置一级显示块
    headerVlun=HeaderVlun()
    from init.Inittools import Inittools
    urls=[]
    okurls=[]
    errUrls=[]

    if options.url:
        print("[+] 开始扫描单个目标 "+options.url)
        urls.append(options.url)
        okurls,errUrls=Inittools.getokurls(None,urls)
        scanSingle(okurls[0])
    if options.urls:
        # globals(urls)
        # globals(okurls)
        # globals(errUrls)
        import os
        if not(os.path.exists(options.urls)):exit("[!] File ["+options.urls+"] not exist!!")
        print("[+] 开始扫描多个目标 "+options.urls)
        f=open(options.urls,'r')
        urls=f.readlines()

        if len(tuple(set(urls)))!=len(urls):
            print("[*] 原%d个,去重后%d个"%(len(urls),len(tuple(set(urls)))))
            urls=tuple(set(urls)) #去重

        okurls,errUrls=Inittools.getokurls(None,urls)
        # print("\n==>",okurls)
        for i in okurls:
            i=i.strip()
            if not i[0:4] == "http": i = "http://" + i
            print("\n"+"█ 开始扫描--> "+i)
            scanSingle(i)
    print()
    printEntity.showred("扫描完毕,请求成功/错误/所有:"+str(len(okurls))+"/"+str(len(errUrls))+"/"+str(len(urls)),1)
    print()

    for i in allVuln.keys():
        printEntity.showgreen("\tTarget"+"\t"+i,0)
        print("\n")
        if len(allVuln[i])<=0:
            printEntity.showUnvipInfo2("-没有找到漏洞",2)
        else:
            showonce=True
            for i in allVuln[i]:
                printEntity.seatNum=2
                printEntity.showVulnInfo("-"+i,2)
        printEntity.showUnvipInfo2("_"*60+"\n",2)

    if len(errUrls)>0:
        printEntity.showred("\t请求失败的url: "+str(len(errUrls)),0)
        for i in errUrls:
            printEntity.showUnvipInfo2("-"+i,2)
        printEntity.showUnvipInfo2("_"*60+"\n",2)