s0md3v/Corsy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added path to not be dropped issue #27

Browse Source
This commit is contained in:
duckie
2020-08-19 22:51:54 +05:30
committed by GitHub
parent 6c805b24d1
commit 36a87ffbdd
1 changed files with 61 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

111
corsy.py
View File

@@ -6,21 +6,21 @@ import json
import argparse import argparse
from core.tests import active_tests from core.tests import active_tests
from core.utils import host, prompt, format_result, create_url_list from core.utils import host, prompt, format_result, create_url_list, create_stdin_list
from core.colors import bad, end, red, run, good, grey, green, white, yellow from core.colors import bad, end, red, run, good, grey, green, white, yellow
print(''' print('''
%sＣＯＲＳＹ %s{%sv1.0-beta%s}%s %sＣＯＲＳＹ %s{%sv1.0-beta%s}%s
''' % (green, white, grey, white, end)) ''' % (green, white, grey, white, end))
try: try:
import concurrent.futures import concurrent.futures
from urllib.parse import urlparse from urllib.parse import urlparse
except ImportError: except ImportError:
print(' %s corsy needs Python > 3.4 to run.' % bad) print(' %s corsy needs Python > 3.4 to run.' % bad)
quit() quit()
parser = argparse.ArgumentParser() parser = argparse.ArgumentParser()
parser.add_argument('-u', help='target url', dest='target') parser.add_argument('-u', help='target url', dest='target')
@@ -30,6 +30,7 @@ parser.add_argument('-t', help='thread count', dest='threads', type=int, default
parser.add_argument('-d', help='request delay', dest='delay', type=float, default=0) parser.add_argument('-d', help='request delay', dest='delay', type=float, default=0)
parser.add_argument('-q', help='don\'t print help tips', dest='quiet', action='store_true') parser.add_argument('-q', help='don\'t print help tips', dest='quiet', action='store_true')
parser.add_argument('--headers', help='add headers', dest='header_dict', nargs='?', const=True) parser.add_argument('--headers', help='add headers', dest='header_dict', nargs='?', const=True)
parser.add_argument('-v', help='verbose', dest='verbose',type=str, default=False)
args = parser.parse_args() args = parser.parse_args()
delay = args.delay delay = args.delay
@@ -39,58 +40,68 @@ threads = args.threads
inp_file = args.inp_file inp_file = args.inp_file
json_file = args.json_file json_file = args.json_file
header_dict = args.header_dict header_dict = args.header_dict
verbose = args.verbose
if verbose:
print ('verbos is enabled')
if type(header_dict) == bool: if type(header_dict) == bool:
header_dict = extractHeaders(prompt()) header_dict = extractHeaders(prompt())
elif type(header_dict) == str: elif type(header_dict) == str:
header_dict = extractHeaders(header_dict) header_dict = extractHeaders(header_dict)
else: else:
header_dict = { header_dict = {
'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0', 'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:70.0) Gecko/20100101 Firefox/70.0',
'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
'Accept-Language': 'en-US,en;q=0.5', 'Accept-Language': 'en-US,en;q=0.5',
'Accept-Encoding': 'gzip', 'Accept-Encoding': 'gzip',
'DNT': '1', 'DNT': '1',
'Connection': 'close', 'Connection': 'close',
} }
# PIPE output from other tools such as httprobe etc
if ( sys.stdin.isatty()):
urls = create_url_list(target, inp_file)
else:
urls = create_stdin_list(target, sys.stdin)
urls = create_url_list(target, inp_file)
def cors(target, header_dict, delay): def cors(target, header_dict, delay):
url = target url = target
root = host(url) root = host(url)
parsed = urlparse(url) parsed = urlparse(url)
netloc = parsed.netloc netloc = parsed.netloc
scheme = parsed.scheme scheme = parsed.scheme
url = scheme + '://' + netloc url = scheme + '://' + netloc + parsed.path
return active_tests(url, root, scheme, header_dict, delay) return active_tests(url, root, scheme, header_dict, delay)
if urls: if urls:
if len(urls) > 1: if len(urls) > 1:
print(' %s Estimated scan time: %i secs' % (run, round(len(urls) * 1.75))) print(' %s Estimated scan time: %i secs' % (run, round(len(urls) * 1.75)))
results = [] results = []
threadpool = concurrent.futures.ThreadPoolExecutor(max_workers=threads) threadpool = concurrent.futures.ThreadPoolExecutor(max_workers=threads)
futures = (threadpool.submit(cors, url, header_dict, delay) for url in urls) futures = (threadpool.submit(cors, url, header_dict, delay) for url in urls)
for each in concurrent.futures.as_completed(futures): for each in concurrent.futures.as_completed(futures):
result = each.result() result = each.result()
results.append(result) results.append(result)
if result: if result:
for i in result: for i in result:
print(' %s %s' % (good, i)) print(' %s %s' % (good, i))
print(' %s-%s Class: %s' % (yellow, end, result[i]['class'])) print(' %s-%s Class: %s' % (yellow, end, result[i]['class']))
if not quiet: if not quiet:
print(' %s-%s Description: %s' % (yellow, end, result[i]['description'])) print(' %s-%s Description: %s' % (yellow, end, result[i]['description']))
print(' %s-%s Severity: %s' % (yellow, end, result[i]['severity'])) print(' %s-%s Severity: %s' % (yellow, end, result[i]['severity']))
print(' %s-%s Exploitation: %s' % (yellow, end, result[i]['exploitation'])) print(' %s-%s Exploitation: %s' % (yellow, end, result[i]['exploitation']))
print(' %s-%s ACAO Header: %s' % (yellow, end, result[i]['acao header'])) print(' %s-%s ACAO Header: %s' % (yellow, end, result[i]['acao header']))
print(' %s-%s ACAC Header: %s\n' % (yellow, end, result[i]['acac header'])) print(' %s-%s ACAC Header: %s\n' % (yellow, end, result[i]['acac header']))
results = format_result(results) results = format_result(results)
if results: if results:
if json_file: if json_file:
with open(json_file, 'w+') as file: with open(json_file, 'w+') as file:
json.dump(results, file, indent=4) json.dump(results, file, indent=4)
else: else:
print(' %s No misconfigurations found.' % bad) print(' %s No misconfigurations found.' % bad)
else: else:
print(' %s No valid URLs to test.' % bad) print(' %s No valid URLs to test.' % bad)