Update to v0.4.2
This commit is contained in:
Jan Rude
@@ -26,52 +26,119 @@ from lib.output import Output
|
||||
|
||||
class Typo3_Installation:
|
||||
"""
|
||||
This class checks, if Typo3 is used on the domain.
|
||||
This class checks, if Typo3 is used on the domain with different approaches.
|
||||
If Typo3 is used, a link to the login page is shown.
|
||||
|
||||
name: URL of the domain
|
||||
extensions: Extensions to check for
|
||||
typo3: If Typo3 is installed
|
||||
"""
|
||||
@staticmethod
|
||||
def run(domain):
|
||||
login_found = Typo3_Installation.search_login(domain)
|
||||
if not login_found:
|
||||
Typo3_Installation.check(domain)
|
||||
root = Typo3_Installation.check_root(domain)
|
||||
check_installation = Typo3_Installation.check_installation(domain)
|
||||
if not root:
|
||||
default_files = Typo3_Installation.check_default_files(domain)
|
||||
if not default_files:
|
||||
typo = Typo3_Installation.check_404(domain)
|
||||
|
||||
# Searching for Typo3 references in HTML comments
|
||||
"""
|
||||
This method requests the root page
|
||||
and searches for a specific string in the response.
|
||||
Usually there are some TYPO3 notes in the HTML comments.
|
||||
"""
|
||||
@staticmethod
|
||||
def check(domain):
|
||||
response = Request.get_request(domain.get_name(), '/')
|
||||
Request.interesting_headers(domain, response[1], response[2])
|
||||
def check_root(domain):
|
||||
try:
|
||||
regex = re.compile('[Tt][Yy][Pp][Oo]3 (\d{1,2}\.\d{1,2}\.[0-9][0-9]?)')
|
||||
response = Request.get_request(domain.get_name(), '/')
|
||||
regex = re.compile('[Tt][Yy][Pp][Oo]3 (\d{1,2}\.\d{1,2}\.?[0-9]?[0-9]?)')
|
||||
searchVersion = regex.search(response[0])
|
||||
version = searchVersion.groups()
|
||||
version = searchVersion.groups()[0]
|
||||
domain.set_typo3()
|
||||
domain.set_typo3_version(version[0].split()[0])
|
||||
domain.set_typo3_version(version)
|
||||
return True
|
||||
except:
|
||||
return False
|
||||
|
||||
"""
|
||||
This method requests the homepage
|
||||
and searches for a Typo3 path reference
|
||||
in order to determine the Typo3 installation path.
|
||||
"""
|
||||
@staticmethod
|
||||
def check_installation(domain):
|
||||
response = Request.get_request(domain.get_name(), '/')
|
||||
if not response:
|
||||
exit(-1)
|
||||
headers = Request.interesting_headers(response[1], response[2])
|
||||
for key in headers:
|
||||
domain.set_interesting_headers(key, headers[key])
|
||||
try:
|
||||
path = re.search('(href|src|content)=(.{0,35})(typo3temp/|typo3conf/)', response[0])
|
||||
if not (path.groups()[1] == '"' or '"../' in path.groups()[1]):
|
||||
real_path = (path.groups()[1].split('"')[1])
|
||||
if 'http' in real_path:
|
||||
domain.set_name(real_path)
|
||||
else:
|
||||
domain.set_name(domain.get_name() + real_path)
|
||||
domain.set_path(real_path)
|
||||
domain.set_typo3()
|
||||
return True
|
||||
except:
|
||||
return False
|
||||
|
||||
"""
|
||||
This method requests different files, which are generated on installation.
|
||||
Usually they are not deleted by admins
|
||||
and can be used as an idicator of a TYPO3 installation.
|
||||
"""
|
||||
@staticmethod
|
||||
def check_default_files(domain):
|
||||
files = {'/README.md':'[Tt][Yy][Pp][Oo]3 [Cc][Mm][Ss]',
|
||||
'/README.txt':'[Tt][Yy][Pp][Oo]3 [Cc][Mm][Ss]',
|
||||
'/INSTALL.txt':'INSTALLING [Tt][Yy][Pp][Oo]3',
|
||||
'/typo3_src/LICENSE.txt':'The [Tt][Yy][Pp][Oo]3 licensing conditions'
|
||||
}
|
||||
|
||||
for path, regex in files.items():
|
||||
try:
|
||||
regex = re.compile('TYPO3 (\d{1,2}\.\d{1,2}) CMS')
|
||||
searchHTML = regex.search(response[0])
|
||||
version = searchHTML.groups()
|
||||
response = Request.get_request(domain.get_name(), path)
|
||||
regex = re.compile(regex)
|
||||
searchInstallation = regex.search(response[0])
|
||||
installation = searchInstallation.groups()
|
||||
domain.set_typo3()
|
||||
domain.set_typo3_version(version[0].split()[0])
|
||||
return True
|
||||
except:
|
||||
return False
|
||||
pass
|
||||
return False
|
||||
|
||||
# Searching Typo3 login page
|
||||
"""
|
||||
This method requests a site which is not available.
|
||||
TYPO3 installations usually generate a default error page,
|
||||
which can be used as an indicator.
|
||||
"""
|
||||
@staticmethod
|
||||
def check_404(domain):
|
||||
domain_name = domain.get_name()
|
||||
response = Request.get_request((domain_name.split('/')[0] + '//' + domain_name.split('/')[2]), '/idontexist')
|
||||
try:
|
||||
regex = re.compile('[Tt][Yy][Pp][Oo]3 CMS')
|
||||
searchInstallation = regex.search(response[0])
|
||||
installation = searchInstallation.groups()
|
||||
domain.set_typo3()
|
||||
return True
|
||||
except:
|
||||
return False
|
||||
|
||||
"""
|
||||
This method requests the default login page
|
||||
and searches for a specific string in the title or the response.
|
||||
If the access is forbidden (403), extension search is still possible.
|
||||
"""
|
||||
@staticmethod
|
||||
def search_login(domain):
|
||||
try:
|
||||
response = Request.get_request(domain.get_name(), '/typo3/index.php')
|
||||
Request.interesting_headers(domain, response[1], response[2])
|
||||
regex = re.compile('<title>(.*)</title>', re.IGNORECASE)
|
||||
searchTitle = regex.search(response[0])
|
||||
title = searchTitle.groups()[0]
|
||||
if 'TYPO3' in title or 'TYPO3 SVN ID:' in response[0]:
|
||||
if ('TYPO3' in title) or ('TYPO3 CMS' in response[0]) or (response[3] == 403):
|
||||
domain.set_typo3()
|
||||
domain.set_login_found()
|
||||
return True
|
||||
|
||||
Reference in New Issue
Block a user