Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 54d0678

Browse files
stamparmstamparm
committed
Adding new WAF scripts
1 parent 30497ac commit 54d0678

6 files changed

Lines changed: 58 additions & 5 deletions

File tree

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
from lib.core.enums import OS
2020

2121
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
22-
VERSION = "1.3.1.6"
22+
VERSION = "1.3.1.7"
2323
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2424
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2525
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

‎txt/checksum.md5‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ fe370021c6bc99daf44b2bfc0d1effb3 lib/core/patch.py
4949
9a7d68d5fa01561500423791f15cc676 lib/core/replication.py
5050
3179d34f371e0295dd4604568fb30bcd lib/core/revision.py
5151
d6269c55789f78cf707e09a0f5b45443 lib/core/session.py
52-
0dd33e8fe128a0b3bf3f94a463d0a61a lib/core/settings.py
52+
885aad10b81d3eaee5218ffbe29db374 lib/core/settings.py
5353
a8a7501d1e6b21669b858a62e921d191 lib/core/shell.py
5454
5dc606fdf0afefd4b305169c21ab2612 lib/core/subprocessng.py
5555
eec3080ba5baca44c6de4595f1c92a0d lib/core/target.py
@@ -416,7 +416,7 @@ af079de99a8ec6988d28aa4c0aa32cf9 waf/cloudbric.py
416416
8fec83056c8728076ab17ab3a2ebbe7b waf/cloudflare.py
417417
8414f766b0171fbc264c46ad40dff237 waf/cloudfront.py
418418
847ee97f6e0f8aeec61afd3e0c91543b waf/comodo.py
419-
f7571543ccb671a63a8139e375d6a4f2 waf/crawlprotect.py
419+
4ed76fdf2add2405bb6157ac025e01b9 waf/crawlprotect.py
420420
f20b14ca9f7c2442fd1e9432d933a75b waf/datapower.py
421421
e49bb75985f60556b4481dc085f3c62b waf/denyall.py
422422
dbe50bbcb1b4664d6cebfcca63e75125 waf/distil.py
@@ -427,17 +427,19 @@ a8412619d7f26ed6bc9e0b20a57b2324 waf/edgecast.py
427427
588d2f9a8f201e120e74e508564cb487 waf/fortiweb.py
428428
0e9eb20967d2dde941cca8c663a63e1f waf/generic.py
429429
2aa7775dac8df4a3cdb736fdf51dc9cb waf/hyperguard.py
430+
256a7ea2c1cd2745fe788cf8f6123f8a waf/immunify360.py
430431
1adbd0c470d1bbcec370722f05094255 waf/incapsula.py
431432
fb6be55d21a70765e35549af2484f762 waf/__init__.py
432433
a3ee375714987acccc26d1b07c2e8af7 waf/isaserver.py
433434
ce9cf35919a92d65347bb74ca0c5c86f waf/jiasule.py
434435
f44ed04eeb4287c11ce277703ec7d72d waf/knownsec.py
435436
d50d82bec48814eb5b699d302dbdae9a waf/kona.py
436-
10b1c6891494b780d1966e47fca2b58a waf/modsecurity.py
437+
4397c299d27a500851726444fb89759e waf/modsecurity.py
437438
78af8e791207db9723a14bddeb7524af waf/naxsi.py
438439
504ade4d32bdbbd2932eebb07f57c3eb waf/netcontinuum.py
439440
84e9c68b6ecffafb5ec8cd96acaf62b9 waf/newdefend.py
440441
69fc40e85751279e9018d643742db04e waf/nsfocus.py
442+
a59aff03a5b3fb40ea0feb3489677040 waf/onmessage.py
441443
7ff3c93f2c77a984ebbf217c7c38a796 waf/paloalto.py
442444
2979bb64c24256a83625d75a385dde9b waf/profense.py
443445
8de0d46738335a4e498c4ac9038ac3c3 waf/proventia.py

‎waf/crawlprotect.py‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,6 @@ def detect(get_page):
1515
for vector in WAF_ATTACK_VECTORS:
1616
page, _, code = get_page(get=vector)
1717
retval = code >= 400 and "This site is protected by CrawlProtect" in (page or "")
18+
retval |= "<title>CrawlProtect" in (page or "")
1819

1920
return retval

‎waf/immunify360.py‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
import re
9+
10+
from lib.core.enums import HTTP_HEADER
11+
from lib.core.settings import WAF_ATTACK_VECTORS
12+
13+
__product__ = "Imunify360 (CloudLinux Inc.)"
14+
15+
def detect(get_page):
16+
retval = False
17+
18+
for vector in WAF_ATTACK_VECTORS:
19+
page, headers, _ = get_page(get=vector)
20+
retval = re.search(r"\Aimunify360", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
21+
retval = any(_ in (page or "") for _ in ("protected by Imunify360", "Powered by Imunify360", "imunify360 preloader"))
22+
if retval:
23+
break
24+
25+
return retval

‎waf/modsecurity.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ def detect(get_page):
1818
for vector in WAF_ATTACK_VECTORS:
1919
page, headers, code = get_page(get=vector)
2020
retval = re.search(r"Mod_Security|NOYB", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
21-
retval |= any(_ in (page or "") for _ in ("This error was generated by Mod_Security", "One or more things in your request were suspicious", "rules of the mod_security module", "The page you are trying to access is restricted due to a security rule"))
21+
retval |= any(_ in (page or "") for _ in ("This error was generated by Mod_Security", "One or more things in your request were suspicious", "rules of the mod_security module", "The page you are trying to access is restricted due to a security rule", "Protected by Mod Security"))
2222
if retval:
2323
break
2424

‎waf/onmessage.py‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
import re
9+
10+
from lib.core.settings import WAF_ATTACK_VECTORS
11+
12+
__product__ = "onMessage Shield (Blackbaud)"
13+
14+
def detect(get_page):
15+
retval = False
16+
17+
for vector in WAF_ATTACK_VECTORS:
18+
page, headers, _ = get_page(get=vector)
19+
retval = re.search(r"onMessage Shield", headers.get("X-Engine", ""), re.I) is not None
20+
retval |= "This site is protected by an enhanced security system to ensure a safe browsing experience" in (page or "")
21+
retval |= "onMessage SHIELD" in (page or "")
22+
if retval:
23+
break
24+
25+
return retval

0 commit comments

Comments
 (0)