dash/Typo3Scan
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixed agent bug, cosmetic, added output url of found plugins

Browse Source
This commit is contained in:
c0decave
2020-11-11 10:08:00 +01:00
parent c053a2e5f7
commit 93736427f2
2 changed files with 17 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lib/extensions.py
View File

@@ -102,6 +102,7 @@ class Extensions:
continue continue
print(' \u251c Extension Title: '.ljust(28) + '{}'.format(data[0])) print(' \u251c Extension Title: '.ljust(28) + '{}'.format(data[0]))
print(' \u251c Extension Repo: '.ljust(28) + 'https://extensions.typo3.org/extension/{}'.format(extension)) print(' \u251c Extension Repo: '.ljust(28) + 'https://extensions.typo3.org/extension/{}'.format(extension))
print(' \u251c Extension Url: '.ljust(28) + '{}'.format(info['url']))
if not 'stable' in data[2]: if not 'stable' in data[2]:
print(' \u251c Current Version: '.ljust(28) + '{} ({})'.format(data[1], Fore.RED + data[2] + Style.RESET_ALL)) print(' \u251c Current Version: '.ljust(28) + '{} ({})'.format(data[1], Fore.RED + data[2] + Style.RESET_ALL))
else: else:

22
typo3scan.py
View File

@@ -33,6 +33,8 @@ from lib.extensions import Extensions
from colorama import Fore, init, deinit, Style from colorama import Fore, init, deinit, Style
init(strip=False) init(strip=False)
from IPython import embed
class Typo3: class Typo3:
def __init__(self): def __init__(self):
self.__domain_list = [] self.__domain_list = []
@@ -63,6 +65,7 @@ class Typo3:
extensions = Extensions() extensions = Extensions()
ext_list = extensions.search_extension(check.get_path(), self.__extensions, args.threads) ext_list = extensions.search_extension(check.get_path(), self.__extensions, args.threads)
if ext_list: if ext_list:
#embed()
print ('\n \u251c Found {} extensions'.format(len(ext_list))) print ('\n \u251c Found {} extensions'.format(len(ext_list)))
print (' \u251c Brute-Forcing Version Information'.format(len(self.__extensions))) print (' \u251c Brute-Forcing Version Information'.format(len(self.__extensions)))
ext_list = extensions.search_ext_version(ext_list, args.threads) ext_list = extensions.search_ext_version(ext_list, args.threads)
@@ -74,15 +77,20 @@ class Typo3:
json_log[check.get_name()] = {'Backend': check.get_backend(), 'Version': check.get_typo3_version(), 'Vulnerabilities':check.get_typo3_vulns(), 'Extensions': json_ext} json_log[check.get_name()] = {'Backend': check.get_backend(), 'Version': check.get_typo3_version(), 'Vulnerabilities':check.get_typo3_vulns(), 'Extensions': json_ext}
json.dump(json_log, open('typo3scan.json', 'w')) json.dump(json_log, open('typo3scan.json', 'w'))
def open_database(self):
database = os.path.join(self.__path, 'lib', 'typo3scan.db')
conn = sqlite3.connect(database)
return database, conn
def run(self): def run(self):
# use the force! # use the force!
mightyForce = args.d4rkf0rce mightyForce = args.d4rkf0rce
if (args.user_agent): if (args.user_agent):
user_agent = args.user_agent user_agent = args.user_agent
database, conn = self.open_database()
else: else:
database = os.path.join(self.__path, 'lib', 'typo3scan.db') database, conn = self.open_database()
conn = sqlite3.connect(database)
c = conn.cursor() c = conn.cursor()
c.execute('SELECT * FROM UserAgents ORDER BY RANDOM() LIMIT 1;') c.execute('SELECT * FROM UserAgents ORDER BY RANDOM() LIMIT 1;')
user_agent = c.fetchone()[0] user_agent = c.fetchone()[0]
@@ -107,19 +115,21 @@ class Typo3:
check = Domain(domain) check = Domain(domain)
check.check_root() check.check_root()
default_files = check.check_default_files() default_files = check.check_default_files()
print(default_files)
if not default_files: if not default_files:
check_404 = check.check_404() check_404 = check.check_404()
if not check.is_typo3(): if not check.is_typo3() and not mightyForce:
print(Fore.RED + '\n[x] It seems that Typo3 is not used on this domain\n' + Fore.RESET) print(Fore.RED + '\n[x] It seems that Typo3 is not used on this domain\n' + Fore.RESET)
elif not check.is_typo3() and mightyForce:
print(Fore.RED + '\n[x] It seems that Typo3 is not used on this domain' + Fore.RESET)
else: else:
self.run_magic() self.run_magic(check, database, conn)
if mightyForce==True: if mightyForce==True:
print(Fore.RED + '\n[!] I don\'t care and know what i do mode! Yeahhhhhh! Force!!!\n' + Fore.RESET) print(Fore.RED + '[!] I don\'t care and know what i do mode! Yeahhhhhh! Force!!!\n' + Fore.RESET)
self.run_magic(check,database,conn) self.run_magic(check,database,conn)
except KeyboardInterrupt: except KeyboardInterrupt:
print('\nReceived keyboard interrupt.\nQuitting...') print('\nReceived keyboard interrupt.\nQuitting...')
exit(-1) exit(-1)