Update to v0.4
This commit is contained in:
Jan Rude
158
typo3_enumerator.py
Normal file
158
typo3_enumerator.py
Normal file
@@ -0,0 +1,158 @@
|
||||
#!/usr/bin/env python3
|
||||
# -*- coding: utf-8 -*-
|
||||
#-------------------------------------------------------------------------------
|
||||
# Typo3 Enumerator - Automatic Typo3 Enumeration Tool
|
||||
# Copyright (c) 2015 Jan Rude
|
||||
#
|
||||
# This program is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program. If not, see [http://www.gnu.org/licenses/](http://www.gnu.org/licenses/)
|
||||
#-------------------------------------------------------------------------------
|
||||
|
||||
__version__ = "0.4"
|
||||
__program__ = "Typo-Enumerator"
|
||||
__description__ = 'Automatic Typo3 enumeration tool'
|
||||
__author__ = "https://github.com/whoot"
|
||||
|
||||
import sys
|
||||
import os.path
|
||||
import datetime
|
||||
import argparse
|
||||
from colorama import Fore, init, deinit
|
||||
|
||||
import lib.configuration as Config
|
||||
from lib.check_installation import Typo3_Installation
|
||||
from lib.version_information import VersionInformation
|
||||
from lib.extensions import Extensions
|
||||
from lib.domain import Domain
|
||||
from lib.update import Update
|
||||
from lib.output import Output
|
||||
init()
|
||||
|
||||
class Typo3:
|
||||
def __init__(self):
|
||||
self.__domain_list = []
|
||||
self.__extensions = None
|
||||
|
||||
def run(self):
|
||||
parser = argparse.ArgumentParser(usage='typoenum.py [options]', add_help=False)
|
||||
group = parser.add_mutually_exclusive_group()
|
||||
anonGroup = parser.add_mutually_exclusive_group()
|
||||
group.add_argument('-f', '--file', dest='file')
|
||||
group.add_argument('-d', '--domain', dest='domain', type=str, nargs='+')
|
||||
group.add_argument('-u', '--update', dest='update', action='store_true')
|
||||
parser.add_argument('--top', type=int, dest='top', metavar='VALUE')
|
||||
parser.add_argument('--state', dest='ext_state', choices = ['all', 'experimental', 'alpha', 'beta', 'stable', 'outdated'], nargs='+', default = ['all'])
|
||||
anonGroup.add_argument('--tor', help='using only TOR for connections', action='store_true')
|
||||
anonGroup.add_argument('--privoxy', help='using only Privoxy for connections', action='store_true')
|
||||
anonGroup.add_argument('--tp', help='using TOR and Privoxy for connections', action='store_true')
|
||||
parser.add_argument('-p', '--port', dest='port', help='Port for TOR/Privoxy (default: 9050/8118)', type=int)
|
||||
|
||||
parser.add_argument( "-h", "--help", action="help")
|
||||
args = parser.parse_args()
|
||||
|
||||
try:
|
||||
if args.update:
|
||||
Update()
|
||||
return True
|
||||
|
||||
if args.tor:
|
||||
from lib.tor_only import Tor
|
||||
if args.port:
|
||||
tor = Tor(args.port)
|
||||
else:
|
||||
tor = Tor()
|
||||
tor.start_daemon()
|
||||
tor.connect()
|
||||
|
||||
elif args.privoxy:
|
||||
from lib.privoxy_only import Privoxy
|
||||
if args.port:
|
||||
privoxy = Privoxy(args.port)
|
||||
else:
|
||||
privoxy = Privoxy()
|
||||
privoxy.start_daemon()
|
||||
privoxy.connect()
|
||||
|
||||
elif args.tp:
|
||||
from lib.tor_with_privoxy import Tor_with_Privoxy
|
||||
if args.port:
|
||||
tp = Tor_with_Privoxy(args.port)
|
||||
else:
|
||||
tp = Tor_with_Privoxy()
|
||||
tp.start_daemon()
|
||||
tp.connect()
|
||||
|
||||
if args.domain:
|
||||
for dom in args.domain:
|
||||
self.__domain_list.append(Domain(dom, args.ext_state, args.top))
|
||||
elif args.file:
|
||||
if not os.path.isfile(args.file):
|
||||
print(Fore.RED + "\n[x] File not found: " + args.file + "\n | Aborting..." + Fore.RESET)
|
||||
sys.exit(-2)
|
||||
else:
|
||||
with open(args.file, 'r') as f:
|
||||
for line in f:
|
||||
domain_list.append(Domain(line.strip('\n'), args.ext_state, args.top))
|
||||
for domain in self.__domain_list:
|
||||
print('\n\n' + Fore.CYAN + '[ Checking ' + domain.get_name() + ' ]' + '\n' + "-"* 73 + Fore.RESET)
|
||||
Typo3_Installation.run(domain)
|
||||
if not domain.get_typo3():
|
||||
print(Fore.RED + '\n[x] Typo3 is not used on this domain' + Fore.RESET)
|
||||
else:
|
||||
if domain.get_login_found():
|
||||
# search version info
|
||||
version = VersionInformation()
|
||||
version.search_typo3_version(domain)
|
||||
Output.typo3_installation(domain)
|
||||
if not domain.get_login_found():
|
||||
print(Fore.YELLOW + '[!] Backend login not found\n | Extension enumeration would be failing\n | Skipping...' + Fore.RESET)
|
||||
else:
|
||||
# Loading extensions
|
||||
if (self.__extensions is None):
|
||||
ext = Extensions(args.ext_state, args.top)
|
||||
self.__extensions = ext.load_extensions()
|
||||
# copy them in domain object
|
||||
if (domain.get_extensions() is None):
|
||||
domain.set_extensions(self.__extensions)
|
||||
# search
|
||||
print ('\n[ Searching', len(self.__extensions), 'extensions ]')
|
||||
ext.search_extension(domain, self.__extensions)
|
||||
ext.search_ext_version(domain, domain.get_installed_extensions())
|
||||
Output.extension_output(domain.get_installed_extensions())
|
||||
|
||||
except KeyboardInterrupt:
|
||||
print("\nReceived keyboard interrupt.\nQuitting...")
|
||||
exit(-1)
|
||||
finally:
|
||||
deinit()
|
||||
now = datetime.datetime.now()
|
||||
print('\n\n' + __program__ + ' finished at ' + now.strftime("%Y-%m-%d %H:%M:%S") + '\n')
|
||||
|
||||
if __name__ == "__main__":
|
||||
print('\n' + 73*'=')
|
||||
print(Fore.BLUE + ' _______ ______ '.center(73))
|
||||
print('|_ _|.--.--.-----.-----.|__ |'.center(73))
|
||||
print(' | | | | | _ | _ ||__ |'.center(73))
|
||||
print(' |___| |___ | __|_____||______|'.center(73))
|
||||
print(' |_____|__| '.center(73))
|
||||
print(' _______ __ '.center(73))
|
||||
print('| ___|.-----.--.--.--------.-----.----.---.-.| |_.-----.----.'.center(73))
|
||||
print('| ___|| | | | | -__| _| _ || _| _ | _|'.center(73))
|
||||
print('|_______||__|__|_____|__|__|__|_____|__| |___._||____|_____|__| '.center(73))
|
||||
print(Fore.RESET)
|
||||
print(__description__.center(73))
|
||||
print(('Version ' + __version__).center(73))
|
||||
print((__author__).center(73))
|
||||
print(73*'=')
|
||||
main = Typo3()
|
||||
main.run()
|
||||
Reference in New Issue
Block a user