Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 9043d9d

Browse files
stamparmstamparm
committed
Minor patching of logics in WAF scripts
1 parent faf154d commit 9043d9d

77 files changed

Lines changed: 96 additions & 80 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@
1717
from lib.core.enums import OS
1818

1919
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
20-
VERSION = "1.3.4.12"
20+
VERSION = "1.3.4.13"
2121
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2222
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2323
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

‎waf/360.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def detect(get_page):
1414

1515
for vector in WAF_ATTACK_VECTORS:
1616
page, headers, code = get_page(get=vector)
17-
retval = headers.get("X-Powered-By-360wzb") is not None
17+
retval |= headers.get("X-Powered-By-360wzb") is not None
1818
retval |= code == 493 and "/wzws-waf-cgi/" in (page or "")
1919
retval |= all(_ in (page or "") for _ in ("eventID", "If you are the Webmaster", "<title>493</title>"))
2020
if retval:

‎waf/aesecure.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def detect(get_page):
1414

1515
for vector in WAF_ATTACK_VECTORS:
1616
page, headers, _ = get_page(get=vector)
17-
retval = headers.get("aeSecure-code") is not None
17+
retval |= headers.get("aeSecure-code") is not None
1818
retval |= all(_ in (page or "") for _ in ("aeSecure", "aesecure_denied.png"))
1919
if retval:
2020
break

‎waf/airlock.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def detect(get_page):
1717

1818
for vector in WAF_ATTACK_VECTORS:
1919
page, headers, _ = get_page(get=vector)
20-
retval = re.search(r"\AAL[_-]?(SESS|LB)", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None
20+
retval |= re.search(r"\AAL[_-]?(SESS|LB)", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None
2121
retval |= all(_ in (page or "") for _ in ("The server detected a syntax error in your request", "Check your request and all parameters", "Bad Request", "Your request ID was"))
2222
if retval:
2323
break

‎waf/anquanbao.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def detect(get_page):
1414

1515
for vector in WAF_ATTACK_VECTORS:
1616
page, headers, code = get_page(get=vector)
17-
retval = code == 405 and any(_ in (page or "") for _ in ("/aqb_cc/error/", "hidden_intercept_time"))
17+
retval |= code == 405 and any(_ in (page or "") for _ in ("/aqb_cc/error/", "hidden_intercept_time"))
1818
if retval:
1919
break
2020

‎waf/approach.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def detect(get_page):
1717

1818
for vector in WAF_ATTACK_VECTORS:
1919
page, headers, code = get_page(get=vector)
20-
retval = re.search(r"Approach Web Application Firewall", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
20+
retval |= re.search(r"Approach Web Application Firewall", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
2121
retval |= re.search(r"Approach(</b>)? Web Application Firewall", page or "", re.I) is not None
2222
retval |= " Your IP address has been logged and this information could be used by authorities to track you." in (page or "")
2323
retval |= all(_ in (page or "") for _ in ("Sorry for the inconvenience!", "If this was an legitimate request please contact us with details!"))

‎waf/armor.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def detect(get_page):
1414

1515
for vector in WAF_ATTACK_VECTORS:
1616
page, _, _ = get_page(get=vector)
17-
retval = "This request has been blocked by website protection from Armor" in (page or "")
17+
retval |= "This request has been blocked by website protection from Armor" in (page or "")
1818
if retval:
1919
break
2020

‎waf/asm.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def detect(get_page):
1414

1515
for vector in WAF_ATTACK_VECTORS:
1616
page, headers, code = get_page(get=vector)
17-
retval = "The requested URL was rejected. Please consult with your administrator." in (page or "")
17+
retval |= "The requested URL was rejected. Please consult with your administrator." in (page or "")
1818
retval |= all(_ in (page or "") for _ in ("security.f5aas.com", "Please enable JavaScript to view the page content"))
1919
if retval:
2020
break

‎waf/aws.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def detect(get_page):
1717

1818
for vector in WAF_ATTACK_VECTORS:
1919
page, headers, code = get_page(get=vector)
20-
retval = code == 403 and re.search(r"\bAWS", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
20+
retval |= code == 403 and re.search(r"\bAWS", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
2121
if retval:
2222
break
2323

‎waf/barracuda.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ def detect(get_page):
1717

1818
for vector in WAF_ATTACK_VECTORS:
1919
page, headers, _ = get_page(get=vector)
20-
retval = re.search(r"\Abarra_counter_session=", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None
20+
retval |= re.search(r"\Abarra_counter_session=", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None
2121
retval |= re.search(r"(\A|\b)barracuda_", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None
2222
retval |= "when this page occurred and the event ID found at the bottom of the page" in (page or "")
2323
if retval:

0 commit comments

Comments
 (0)