diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md index 0047eca..d8c0a57 100644 --- a/doc/CHANGELOG.md +++ b/doc/CHANGELOG.md @@ -1,3 +1,7 @@ +## Version 0.6.3 + +* Fixed advisory URLs + ## Version 0.6.2 * Bugfix in extension vulnerability parsing diff --git a/lib/typo3scan.db b/lib/typo3scan.db index 7531f02..69ea7ae 100644 Binary files a/lib/typo3scan.db and b/lib/typo3scan.db differ diff --git a/lib/update.py b/lib/update.py index 4a09251..a998fb1 100644 --- a/lib/update.py +++ b/lib/update.py @@ -57,13 +57,13 @@ class Update: """ print('\n[+] Searching for new CORE vulnerabilities...') update_counter = 0 - response = requests.get('https://typo3.org/help/security-advisories/typo3-cms/1') - pages = re.findall('', response.text) + response = requests.get('https://typo3.org/help/security-advisories/typo3-cms/page-1') + pages = re.findall('', response.text) last_page = int(pages[-1]) for current_page in range(1, last_page+1): print(' \u251c Page {}/{}'.format(current_page, last_page)) - response = requests.get('https://typo3.org/help/security-advisories/typo3-cms/{}'.format(current_page), timeout=6) + response = requests.get('https://typo3.org/help/security-advisories/typo3-cms/page-{}'.format(current_page), timeout=6) advisories = re.findall('TYPO3-CORE-SA-[0-9][0-9][0-9][0-9]-[0-9][0-9][0-9]', response.text) for advisory in advisories: vulnerabilities = [] @@ -238,13 +238,13 @@ class Update: """ print('\n[+] Searching for new extension vulnerabilities...') update_counter = 0 - response = requests.get('https://typo3.org/help/security-advisories/typo3-extensions/1') - pages = re.findall('', response.text) + response = requests.get('https://typo3.org/help/security-advisories/typo3-extensions/page-1') + pages = re.findall('', response.text) last_page = int(pages[-1]) for current_page in range(1, last_page+1): print(' \u251c Page {}/{}'.format(current_page, last_page)) - response = requests.get('https://typo3.org/help/security-advisories/typo3-extensions/{}'.format(current_page), timeout=6) + response = requests.get('https://typo3.org/help/security-advisories/typo3-extensions/page-{}'.format(current_page), timeout=6) advisories = re.findall('TYPO3-EXT-SA-[0-9][0-9][0-9][0-9]-[0-9][0-9][0-9]', response.text) for advisory in advisories: vulnerabilities = [] diff --git a/typo3scan.py b/typo3scan.py index 9a756a7..1244dc9 100755 --- a/typo3scan.py +++ b/typo3scan.py @@ -18,7 +18,7 @@ # along with this program. If not, see [http://www.gnu.org/licenses/](http://www.gnu.org/licenses/) #------------------------------------------------------------------------------- -__version__ = '0.6.2' +__version__ = '0.6.3' __program__ = 'Typo3Scan' __description__ = 'Automatic Typo3 enumeration tool' __author__ = 'https://github.com/whoot'