s0md3v/Bolt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0.1.3-beta

Browse Source
This commit is contained in:
Somdev Sangwan
2019-01-13 19:09:10 +05:30
committed by GitHub
parent 0fd20ddeee dc948546c1
commit 06889d1a23
4 changed files with 267 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

68
bolt.py
View File

@@ -1,9 +1,11 @@
from core.colors import green, yellow, end, run, good, info, bad, white
lightning = '\033[93;5m⚡\033[0m'
def banner():
print ('''%s
⚡ %sBOLT%s ⚡ v0.1.2-alpha
%s''' % (yellow, white, yellow, end))
print ('''
%s %sBOLT%s %s v0.1.3-bolt
''' % (lightning, white, end, lightning))
banner()
@@ -27,6 +29,7 @@ import re
import statistics
import core.config
from core.config import token
from core.datanize import datanize
from core.prompt import prompt
@@ -36,7 +39,7 @@ from core.evaluate import evaluate
from core.ranger import ranger
from core.zetanize import zetanize
from core.requester import requester
from core.utils import extractHeaders, entropy, isProtected
from core.utils import extractHeaders, entropy, isProtected, monobit
parser = argparse.ArgumentParser()
parser.add_argument('-u', help='target url', dest='target')
@@ -67,14 +70,16 @@ weakTokens = []
tokenDatabase = []
insecureForms = []
print ('%s Phase: Crawling %s[%s1/5%s]%s' % (run, green, end, green, end))
print (' %s Phase: Crawling %s[%s1/6%s]%s' % (lightning, green, end, green, end))
dataset = photon(target, headers, level, threadCount)
allForms = dataset[0]
print ('\r%s Crawled %i URL(s) and found %i form(s).%-10s' % (info, dataset[1], len(allForms), ' '))
print ('%s Phase: Evaluating %s[%s2/5%s]%s' % (run, green, end, green, end))
print (' %s Phase: Evaluating %s[%s2/6%s]%s' % (lightning, green, end, green, end))
evaluate(allForms, weakTokens, tokenDatabase, allTokens, insecureForms)
print (''.join(format(ord(x), 'b') for x in ''.join(allTokens)))
quit()
if weakTokens:
print ('%s Weak token(s) found' % good)
for weakToken in weakTokens:
@@ -106,7 +111,7 @@ if matches:
for name in matches:
print (' %s>%s %s' % (yellow, end, name))
print ('%s Phase: Comparing %s[%s3/5%s]%s' % (run, green, end, green, end))
print (' %s Phase: Comparing %s[%s3/6%s]%s' % (lightning, green, end, green, end))
uniqueTokens = set(allTokens)
if len(uniqueTokens) < len(allTokens):
print ('%s Potential Replay Attack condition found' % good)
@@ -145,7 +150,7 @@ except statistics.StatisticsError:
simTokens = []
print ('%s Phase: Observing %s[%s4/5%s]%s' % (run, green, end, green, end))
print (' %s Phase: Observing %s[%s4/6%s]%s' % (lightning, green, end, green, end))
print ('%s 100 simultaneous requests are being made, please wait.' % info)
def extractForms(url):
@@ -180,7 +185,7 @@ if simTokens:
else:
print ('%s Different tokens were issued for simultaneous requests.' % info)
print ('%s Phase: Testing %s[%s5/5%s]%s' % (good, green, end, green, end))
print (' %s Phase: Testing %s[%s5/6%s]%s' % (lightning, green, end, green, end))
parsed = ''
print ('%s Finding a suitable form for further testing. It may take a while.' % run)
@@ -229,6 +234,7 @@ else:
print ('%s CSRF protection isn\'t enabled for mobile browsers.' % good)
print ('%s Making a request without CSRF token parameter.' % run)
data = tweaker(origData, 'remove')
response = requester(origUrl, data, headers, origGET, 0)
if response.status_code == originalCode:
@@ -240,22 +246,10 @@ if response.status_code == originalCode:
print ('%s It worked!' % good)
else:
print ('%s It didn\'t work' % bad)
print ('%s Making a request without CSRF token parameter value.' % run)
data = tweaker(origData, 'clear')
response = requester(origUrl, data, headers, origGET, 0)
if response.status_code == originalCode:
if str(originalCode)[0] in ['4', '5']:
print ('%s It didn\'t work' % bad)
else:
difference = abs(originalLength - len(response.text))
if difference <= tolerableDifference:
print ('%s It worked!' % good)
else:
print ('%s It didn\'t work' % bad)
seeds = ranger(allTokens)
print ('%s Generating a fake token.' % run)
data = tweaker(origData, 'generate', seeds=seeds)
print ('%s Making a request with the self generated token.' % run)
response = requester(origUrl, data, headers, origGET, 0)
if response.status_code == originalCode:
if str(originalCode)[0] in ['4', '5']:
@@ -267,7 +261,27 @@ if response.status_code == originalCode:
else:
print ('%s It didn\'t work' % bad)
print ('%s Making requests with various tweaks to the token. It may take a while.' % run)
# data = datanize(goodCandidate, headers)[1]
# data = tweaker(data, 'remove')
# response = requester(origUrl, data, headers, origGET, 0)
seeds = ranger(allTokens)
print ('%s Generating a fake token.' % run)
data = tweaker(origData, 'generate', seeds=seeds)
print ('%s Making a request with the self generated token.' % run)
response = requester(origUrl, data, headers, origGET, 0)
if response.status_code == originalCode:
if str(originalCode)[0] in ['4', '5']:
print ('%s It didn\'t work' % bad)
else:
difference = abs(originalLength - len(response.text))
if difference <= tolerableDifference:
print ('%s It worked!' % good)
else:
print ('%s It didn\'t work' % bad)
print (' %s Phase: Analysing %s[%s6/6%s]%s' % (lightning, green, end, green, end))
bitDistribution = monobit(''.join(allTokens))
if bitDistribution < 1:
print ('%s The raito of 0\'s and 1\'s is very high which indicates the tokens are pseudo-random' % good)
else:
print ('%s The ')

13
core/utils.py
View File

@@ -1,6 +1,19 @@
import re
import math
from modules.erfc import erfc
from core.config import token
def monobit(string):
string = ''.join(format(ord(x), 'b') for x in string)
count = 0
for char in string:
if char == '0':
count -= 1
else:
count += 1
value = erfc(math.fabs((count / math.sqrt(len(string)))) / math.sqrt(2))
return value
def entropy(string):
digits = re.findall(r'\d', string)
lowerAlphas = re.findall(r'[a-z]', string)

1
modules/__init__.py Normal file
View File

@@ -0,0 +1 @@

212
modules/erfc.py Normal file
View File

@@ -0,0 +1,212 @@
from math import *
tiny= 1e-300
half= 5.00000000000000000000e-01
one = 1.00000000000000000000e+00
two = 2.00000000000000000000e+00
erx = 8.45062911510467529297e-01
## Coefficients for approximation to erf on [0,0.84375]
efx = 1.28379167095512586316e-01
efx8= 1.02703333676410069053e+00
pp0 = 1.28379167095512558561e-01
pp1 = -3.25042107247001499370e-01
pp2 = -2.84817495755985104766e-02
pp3 = -5.77027029648944159157e-03
pp4 = -2.37630166566501626084e-05
qq1 = 3.97917223959155352819e-01
qq2 = 6.50222499887672944485e-02
qq3 = 5.08130628187576562776e-03
qq4 = 1.32494738004321644526e-04
qq5 = -3.96022827877536812320e-06
def erf1(x):
'''erf(x) for x in [0,0.84375]'''
e, i = frexp(x)
if abs(i)>28:
if abs(i)>57:
return 0.125*(8.0*x+efx8*x)
return x + efx*x
z = x*x
r = pp0+z*(pp1+z*(pp2+z*(pp3+z*pp4)))
s = one+z*(qq1+z*(qq2+z*(qq3+z*(qq4+z*qq5))))
y = r/s
return x + x*y
def erfc1(x):
'''erfc(x)for x in [0,0.84375]'''
e,i = frexp(x)
if abs(i)>56:
return one-x
z = x*x
r = pp0+z*(pp1+z*(pp2+z*(pp3+z*pp4)))
s = one+z*(qq1+z*(qq2+z*(qq3+z*(qq4+z*qq5))))
y = r/s
if (x<0.25):
return one-(x+x*y)
else:
r = x*y
r += (x-half)
return half - r
## Coefficients for approximation to erf in [0.84375,1.25]
pa0 = -2.36211856075265944077e-03
pa1 = 4.14856118683748331666e-01
pa2 = -3.72207876035701323847e-01
pa3 = 3.18346619901161753674e-01
pa4 = -1.10894694282396677476e-01
pa5 = 3.54783043256182359371e-02
pa6 = -2.16637559486879084300e-03
qa1 = 1.06420880400844228286e-01
qa2 = 5.40397917702171048937e-01
qa3 = 7.18286544141962662868e-02
qa4 = 1.26171219808761642112e-01
qa5 = 1.36370839120290507362e-02
qa6 = 1.19844998467991074170e-02
def erf2(x):
'''erf(x) for x in [0.84375,1.25]'''
s = fabs(x)-one
P = pa0+s*(pa1+s*(pa2+s*(pa3+s*(pa4+s*(pa5+s*pa6)))))
Q = one+s*(qa1+s*(qa2+s*(qa3+s*(qa4+s*(qa5+s*qa6)))))
if x>=0:
return erx + P/Q
return -erx - P/Q
def erfc2(x):
'''erfc(x) for x in [0.84375, 1.25]'''
return one-erf2(x)
## Coefficients for approximation to erfc in [1.25,1/0.35]
ra0 = -9.86494403484714822705e-03
ra1 = -6.93858572707181764372e-01
ra2 = -1.05586262253232909814e+01
ra3 = -6.23753324503260060396e+01
ra4 = -1.62396669462573470355e+02
ra5 = -1.84605092906711035994e+02
ra6 = -8.12874355063065934246e+01
ra7 = -9.81432934416914548592e+00
sa1 = 1.96512716674392571292e+01
sa2 = 1.37657754143519042600e+02
sa3 = 4.34565877475229228821e+02
sa4 = 6.45387271733267880336e+02
sa5 = 4.29008140027567833386e+02
sa6 = 1.08635005541779435134e+02
sa7 = 6.57024977031928170135e+00
sa8 = -6.04244152148580987438e-02
def erf3(x):
'''erf(x) for x in [1.25,2.857142]'''
x0=x
x = fabs(x)
s = one/(x*x)
R=ra0+s*(ra1+s*(ra2+s*(ra3+s*(ra4+s*(ra5+s*(ra6+s*ra7))))))
S=one+s*(sa1+s*(sa2+s*(sa3+s*(sa4+s*(sa5+s*(sa6+s*(sa7+s*sa8)))))))
z = ldexp(x0,0)
r = exp(-z*z-0.5625)*exp((z-x)*(z+x)+R/S)
if(x0>=0):
return one-r/x
else:
return r/x-one;
def erfc3(x):
'''erfc(x) for x in [1.25,1/0.35]'''
return one-erf3(x)
## Coefficients for approximation to erfc in [1/.35,28]
rb0 = -9.86494292470009928597e-03
rb1 = -7.99283237680523006574e-01
rb2 = -1.77579549177547519889e+01
rb3 = -1.60636384855821916062e+02
rb4 = -6.37566443368389627722e+02
rb5 = -1.02509513161107724954e+03
rb6 = -4.83519191608651397019e+02
sb1 = 3.03380607434824582924e+01
sb2 = 3.25792512996573918826e+02
sb3 = 1.53672958608443695994e+03
sb4 = 3.19985821950859553908e+03
sb5 = 2.55305040643316442583e+03
sb6 = 4.74528541206955367215e+02
sb7 = -2.24409524465858183362e+01
def erf4(x):
'''erf(x) for x in [1/.35,6]'''
x0=x
x = fabs(x)
s = one/(x*x)
R=rb0+s*(rb1+s*(rb2+s*(rb3+s*(rb4+s*(rb5+s*rb6)))))
S=one+s*(sb1+s*(sb2+s*(sb3+s*(sb4+s*(sb5+s*(sb6+s*sb7))))))
z = ldexp(x0,0)
r = exp(-z*z-0.5625)*exp((z-x)*(z+x)+R/S)
if(z>=0):
return one-r/x
else:
return r/x-one;
def erfc4(x):
'''erfc(x) for x in [2.857142,6]'''
return one-erf4(x)
def erf5(x):
'''erf(x) for |x| in [6,inf)'''
if x>0:
return one-tiny
return tiny-one
def erfc5(x):
'''erfc(x) for |x| in [6,inf)'''
if (x>0):
return tiny*tiny
return two-tiny
#############
##inf = float('inf')
##nan = float('nan')
###########
inf = float(9e999)
def Erf(x):
'''return the error function of x'''
f = float(x)
if (f == inf):
return 1.0
elif (f == -inf):
return -1.0
## elif (f is nan):
## return nan
else:
if (abs(x)<0.84375):
return erf1(x)
elif (0.84375<=abs(x)<1.25):
return erf2(x)
elif (1.25<=abs(x)<2.857142):
return erf3(x)
elif (2.857142<=abs(x)<6):
return erf4(x)
elif (abs(x)>=6):
return erf5(x)
def Erfc(x):
'''return the complementary of error function of x'''
f = float(x)
if (f == inf):
return 0.0
elif (f is -inf):
return 2.0
## elif (f == nan):
## return nan
else:
if (abs(x)<0.84375):
return erfc1(x)
elif (0.84375<=abs(x)<1.25):
return erfc2(x)
elif (1.25<=abs(x)<2.857142):
return erfc3(x)
elif (2.857142<=abs(x)<6):
return erfc4(x)
elif (abs(x)>=6):
return erfc5(x)