#!/usr/bin/env python # -*- coding: utf-8 -*- #------------------------------------------------------------------------------- # Typo3 Enumerator - Automatic Typo3 Enumeration Tool # Copyright (c) 2015 Jan Rude # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see [http://www.gnu.org/licenses/](http://www.gnu.org/licenses/) #------------------------------------------------------------------------------- import requests import re from colorama import Fore requests.packages.urllib3.disable_warnings() from lib.output import Output header = {'User-Agent' : "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"} timeout = 10 class Request: """ This class is used to make all server requests """ @staticmethod def get_request(domain_name, path): try: r = requests.get(domain_name + path, timeout=timeout, headers=header, verify=False) httpResponse = str((r.text).encode('utf-8')) headers = r.headers cookies = r.cookies status_code = r.status_code response = [httpResponse, headers, cookies, status_code] return response except requests.exceptions.Timeout: print(Fore.RED + '[x] Connection timed out' + Fore.RESET) except requests.exceptions.ConnectionError as e: print(Fore.RED + '[x] Connection error\n | Please make sure you provided the right URL' + Fore.RESET) except requests.exceptions.RequestException as e: print(Fore.RED + str(e) + Fore.RESET) @staticmethod def head_request(domain_name, path): try: r = requests.head(domain_name + path, timeout=timeout, headers=header, allow_redirects=False, verify=False) status_code = str(r.status_code) if status_code == '405': print("WARNING, (HEAD) method not allowed!!") exit(-1) return status_code except requests.exceptions.Timeout: print(Fore.RED + '[x] Connection timed out' + Fore.RESET) except requests.exceptions.ConnectionError as e: print(Fore.RED + '[x] Connection aborted.\n Please make sure you provided the right URL' + Fore.RESET) except requests.exceptions.RequestException as e: print(Fore.RED + str(e) + Fore.RESET) @staticmethod def interesting_headers(headers, cookies): found_headers = {} for header in headers: if header == 'server': found_headers['Server'] = headers.get('server') elif header == 'x-powered-by': found_headers['X-Powered-By'] = headers.get('x-powered-by') elif header == 'via': found_headers['Via'] = headers.get('via') try: typo_cookie = cookies['be_typo_user'] found_headers['be_typo_user'] = typo_cookie except: pass try: typo_cookie = cookies['fe_typo_user'] found_headers['fe_typo_user'] = typo_cookie except: pass return found_headers @staticmethod def version_information(domain_name, path, regex): r = requests.get(domain_name + path, stream=True, timeout=timeout, headers=header, verify=False) if r.status_code == 200: try: for content in r.iter_content(chunk_size=400, decode_unicode=False): regex = re.compile(regex) search = regex.search(str(content)) version = search.groups()[0] return version except: return None