Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 9f75fd4

Browse files
stamparmstamparm
committed
New WAF scripts
1 parent 54d0678 commit 9f75fd4

10 files changed

Lines changed: 149 additions & 4 deletions

File tree

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
from lib.core.enums import OS
2020

2121
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
22-
VERSION = "1.3.1.7"
22+
VERSION = "1.3.1.8"
2323
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2424
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2525
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

‎txt/checksum.md5‎

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ fe370021c6bc99daf44b2bfc0d1effb3 lib/core/patch.py
4949
9a7d68d5fa01561500423791f15cc676 lib/core/replication.py
5050
3179d34f371e0295dd4604568fb30bcd lib/core/revision.py
5151
d6269c55789f78cf707e09a0f5b45443 lib/core/session.py
52-
885aad10b81d3eaee5218ffbe29db374 lib/core/settings.py
52+
f483f079c8682b64940e78c6b75bac77 lib/core/settings.py
5353
a8a7501d1e6b21669b858a62e921d191 lib/core/shell.py
5454
5dc606fdf0afefd4b305169c21ab2612 lib/core/subprocessng.py
5555
eec3080ba5baca44c6de4595f1c92a0d lib/core/target.py
@@ -412,6 +412,7 @@ ef8c5db49ad9973b59d6b9b65b001714 waf/blockdos.py
412412
2608fbe2c80fae99bb09db1f93d80cdd waf/bluedon.py
413413
5ae64cad95b7f904c350cc81230c3bd1 waf/chinacache.py
414414
a05edf8f2962dfff0457b7a4fd5e169c waf/ciscoacexml.py
415+
2565869c73a9a37f25deb317e8f5d9dd waf/cleantalk.py
415416
af079de99a8ec6988d28aa4c0aa32cf9 waf/cloudbric.py
416417
8fec83056c8728076ab17ab3a2ebbe7b waf/cloudflare.py
417418
8414f766b0171fbc264c46ad40dff237 waf/cloudfront.py
@@ -426,6 +427,7 @@ a8412619d7f26ed6bc9e0b20a57b2324 waf/edgecast.py
426427
3f440d629b31052e675ee9d48d4ce370 waf/expressionengine.py
427428
588d2f9a8f201e120e74e508564cb487 waf/fortiweb.py
428429
0e9eb20967d2dde941cca8c663a63e1f waf/generic.py
430+
4ea580dd1b9679bd733866976ad5d81e waf/godaddy.py
429431
2aa7775dac8df4a3cdb736fdf51dc9cb waf/hyperguard.py
430432
256a7ea2c1cd2745fe788cf8f6123f8a waf/immunify360.py
431433
1adbd0c470d1bbcec370722f05094255 waf/incapsula.py
@@ -434,10 +436,12 @@ a3ee375714987acccc26d1b07c2e8af7 waf/isaserver.py
434436
ce9cf35919a92d65347bb74ca0c5c86f waf/jiasule.py
435437
f44ed04eeb4287c11ce277703ec7d72d waf/knownsec.py
436438
d50d82bec48814eb5b699d302dbdae9a waf/kona.py
439+
d4f36e44f496f4d51baa3241eabc60fd waf/malcare.py
437440
4397c299d27a500851726444fb89759e waf/modsecurity.py
438441
78af8e791207db9723a14bddeb7524af waf/naxsi.py
439442
504ade4d32bdbbd2932eebb07f57c3eb waf/netcontinuum.py
440443
84e9c68b6ecffafb5ec8cd96acaf62b9 waf/newdefend.py
444+
d03dfe93a14c966b88f5baf59ce2b091 waf/ninjafirewall.py
441445
69fc40e85751279e9018d643742db04e waf/nsfocus.py
442446
a59aff03a5b3fb40ea0feb3489677040 waf/onmessage.py
443447
7ff3c93f2c77a984ebbf217c7c38a796 waf/paloalto.py
@@ -446,10 +450,12 @@ a59aff03a5b3fb40ea0feb3489677040 waf/onmessage.py
446450
ac60456fe7af4eb501d448910e98ee4b waf/radware.py
447451
dba6a3b52851d2d7a0a1ab83a51caa5a waf/reblaze.py
448452
987389e4f403b7615d6d8006420a6260 waf/requestvalidationmode.py
453+
8dae5619edafaaceccf1c4eb051c7d22 waf/rsfirewall.py
449454
2a7b234e903d13b3c21d6c17e05d1c46 waf/safe3.py
450455
4382cb217354d816580ee07178d0a8c7 waf/safedog.py
451456
ac0728ddb7a15b46b0eabd78cd661f8c waf/secureiis.py
452457
ba37e1c37fa0e3688873f74183a9cb9c waf/senginx.py
458+
2602a8baed4da643e606a379e4dc75db waf/shieldsecurity.py
453459
4d79866c7cff0d7650a22d0a85126c05 waf/sitelock.py
454460
a840fcd2bb042694f9aab2859e7c9b30 waf/sonicwall.py
455461
45683bfe7a428f47745416c727a789bd waf/sophos.py
@@ -461,8 +467,9 @@ ba0fb1e6b815446b9d6f30950900fc80 waf/trafficshield.py
461467
876c746d96193071271cb8b7e00e1422 waf/urlscan.py
462468
45f28286ffd89200d4c9b6d88a7a518f waf/uspses.py
463469
2d9d9fa8359a9f721e4b977d3da52410 waf/varnish.py
470+
2be220869fae5a942a460428c84345af waf/virusdie.py
464471
67df54343a85fe053226e2a5483b2c64 waf/wallarm.py
465-
6aad5ef252bf428e9bbebe650c0cf67e waf/watchguard.py
472+
114000c53115fa8f4dd9b1b9122ec32a waf/watchguard.py
466473
c8dcaa89f6cde684a578fdc2e9ab2bb8 waf/webappsecure.py
467474
a7b8c4c3d1463409e0e204932f0ddff0 waf/webknight.py
468475
ac9e4e3ced77012ed97284634a9ffc74 waf/wordfence.py

‎waf/cleantalk.py‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "CleanTalk Web Application FireWall (CleanTalk)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = any(_ in (page or "") for _ in ("Blocked by Web Application Firewall", "Security by CleanTalk"))
18+
19+
return retval

‎waf/godaddy.py‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "GoDaddy Website Firewall (GoDaddy Inc.)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = any(_ in (page or "") for _ in ("Access Denied - GoDaddy Website Firewall", "<title>GoDaddy Security - Access Denied</title>"))
18+
19+
return retval

‎waf/malcare.py‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
import re
9+
10+
from lib.core.settings import WAF_ATTACK_VECTORS
11+
12+
__product__ = "MalCare (Inactiv.com Media Solutions Pvt Ltd.)"
13+
14+
def detect(get_page):
15+
retval = False
16+
17+
for vector in WAF_ATTACK_VECTORS:
18+
page, _, _ = get_page(get=vector)
19+
retval = "Blocked because of Malicious Activities" in (page or "")
20+
retval |= re.search(r"Firewall(<[^>]+>)*powered by(<[^>]+>)*MalCare", page or "") is not None
21+
22+
return retval

‎waf/ninjafirewall.py‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "NinjaFirewall (NinTechNet)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = "<title>NinjaFirewall: 403 Forbidden" in (page or "")
18+
retval |= all(_ in (page or "") for _ in ("For security reasons, it was blocked and logged", "NinjaFirewall"))
19+
20+
return retval

‎waf/rsfirewall.py‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "RSFirewall (RSJoomla!)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = any(_ in (page or "") for _ in ("COM_RSFIREWALL_403_FORBIDDEN", "COM_RSFIREWALL_EVENT"))
18+
19+
return retval

‎waf/shieldsecurity.py‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "Shield Security (One Dollar Plugin)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = "Something in the URL, Form or Cookie data wasn't appropriate" in (page or "")
18+
19+
return retval

‎waf/virusdie.py‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/usr/bin/env python
2+
3+
"""
4+
Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
5+
See the file 'LICENSE' for copying permission
6+
"""
7+
8+
from lib.core.settings import WAF_ATTACK_VECTORS
9+
10+
__product__ = "Virusdie (Virusdie LLC)"
11+
12+
def detect(get_page):
13+
retval = False
14+
15+
for vector in WAF_ATTACK_VECTORS:
16+
page, _, _ = get_page(get=vector)
17+
retval = any(_ in (page or "") for _ in ("| Virusdie</title>", "http://cdn.virusdie.ru/splash/firewallstop.png", "&copy; Virusdie.ru</p>"))
18+
19+
return retval

‎waf/watchguard.py‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,9 @@ def detect(get_page):
1616
retval = False
1717

1818
for vector in WAF_ATTACK_VECTORS:
19-
_, headers, code = get_page(get=vector)
19+
page, headers, code = get_page(get=vector)
2020
retval = code >= 400 and re.search(r"\AWatchGuard", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
21+
retval |= "Request denied by WatchGuard Firewall" in (page or "")
2122
if retval:
2223
break
2324

0 commit comments

Comments
 (0)