master

分支 (1)

管理

管理

master

Vxscan
/
script
/
leaks.py

# coding=utf-8

import re
from lib.Requests import Requests
from lib.verify import get_list
from lib.settings import PAGE_404

path = ['/.git/config', '/.svn/entries', '/.git/index', '/.git/HEAD',
        '/.ssh/known_hosts', '/.DS_Store', '/.hg', '/WEB-INF/web.xml', '/WEB-INF/database.properties', '/CVS/Entries']


def verify(text):
    result = True
    for i in PAGE_404:
        if i in text:
            result = False
            break
    return result


def get_info(url):
    try:
        req = Requests()
        for i in path:
            r = req.get(url + i)
            if r.status_code == 200 and '<html>' not in r.text:
                if not re.search(r'{"\w+":', r.text):
                    if verify(r.text):
                        return 'leaks : ' + url + i
    except:
        pass


def check(url, ip, ports, apps):
    result = []
    probe = get_list(ip, ports)
    for i in probe:
        if re.search(r':\d+', i):
            out = get_info(i)
            if out:
                result.append(out)
    if result:
        return result