ring04h / weakfilescan Goto Github PK

第一个：
common.py脚本里提取目标的链接资源时，没有考虑大小写问题，导致爬虫爬取数据不准确。 可以拿这个网站：http://www.shijihulian.com/ 测试。我看了源码，find_all似乎没有考虑大小写的，这算是一个坑吧。
第二个：
FuzzEnginer 分析引擎对备份文件的判断存在缺陷，我认为有2种情况下会被漏掉：1. 备份文件存，文件大小大于20K（代码：39行定义），2. 备份文件存在，文件大小于20k, 但文件内容包含了如：404，not Found等错误信息（代码：40-42行定义）
会被漏掉的2个假象场景：
1、目标网站存在全站的备份文件web.rar ，这个很容易就超过20K限制。
2、目标网站存在key.rar, 里面压缩了几个文件：404.html,config.php,password.txt ，几个很简单的文件。404.html很容易触发 “错误定义”文件识别导致被漏掉。

Traceback (most recent call last):
File "wyspider.py", line 12, in
import libs.requests as requests
File "/media/ddos/DDOS/PenTest/weakfilescan/libs/requests/init.py", line 53, in
from .packages.urllib3.contrib import pyopenssl
File "/media/ddos/DDOS/PenTest/weakfilescan/libs/requests/packages/init.py", line 3, in
from . import urllib3
File "/media/ddos/DDOS/PenTest/weakfilescan/libs/requests/packages/urllib3/init.py", line 10, in
7K{����.ื7�
File "/media/ddos/DDOS/PenTest/weakfilescan/libs/requests/packages/urllib3/connectionpool.py", line 33, in
from .connection import (
File "/media/ddos/DDOS/PenTest/weakfilescan/libs/requests/packages/urllib3/connection.py", line 1
SyntaxError: Non-ASCII character '\xe1' in file /media/ddos/DDOS/PenTest/weakfilescan/libs/requests/packages/urllib3/connection.py on line 1, but no encoding declared; see http://python.org/dev/peps/pep-0263/ for details

检测不到svn泄露

111 1a1 1aa 这种

[root@87a5585bcce3 weakfilescan]# python wyspider.py http://wuyun.org php

* scan http://wuyun.org start

Traceback (most recent call last):
File "wyspider.py", line 17, in
print json.dumps(start_wyspider(sys.argv[1]), indent=2)
File "/weakfilescan/controller.py", line 41, in start_wyspider
link_datas = GetAllLink(siteurl).start()
File "/weakfilescan/libs/GetAllLink.py", line 47, in start
response_obj = LinksParser(http_request_get(self.siteurl))
File "/weakfilescan/common.py", line 170, in init
self.baseurl = get_baseurl(self.url)
File "/weakfilescan/common.py", line 31, in get_baseurl
netloc = urlparse.urlparse(link).netloc
File "/usr/lib64/python2.7/urlparse.py", line 142, in urlparse
tuple = urlsplit(url, scheme, allow_fragments)
File "/usr/lib64/python2.7/urlparse.py", line 181, in urlsplit
i = url.find(':')
AttributeError: 'NoneType' object has no attribute 'find'

hi, thanks for your tool. I love it!

can you help me fix this error please?

/root/weakfilescan/libs/tldextract.py:42: UserWarning: Module chardet was already imported from /usr/local/lib/python2.7/dist-packages/chardet/init.pyc, but /usr/lib/python2.7/dist-packages is being added to sys.path
import pkg_resources
/root/weakfilescan/libs/tldextract.py:42: UserWarning: Module bs4 was already imported from /usr/local/lib/python2.7/dist-packages/bs4/init.pyc, but /usr/lib/python2.7/dist-packages is being added to sys.path
import pkg_resources
/root/weakfilescan/libs/tldextract.py:42: UserWarning: Module lxml was already imported from /usr/local/lib/python2.7/dist-packages/lxml/init.pyc, but /usr/lib/python2.7/dist-packages is being added to sys.path
import pkg_resources
/root/weakfilescan/libs/tldextract.py:42: UserWarning: Module certifi was already imported from /usr/local/lib/python2.7/dist-packages/certifi/init.pyc, but /usr/lib/python2.7/dist-packages is being added to sys.path
import pkg_resources

Also, it is possible to use more extensions like php,asp,html etc in the same scan?

Thanks