aszone /
vulnerabilities
| @@ 50-66 (lines=17) @@ | ||
| 47 | return (bool) preg_match("/\?|(.+?)\=/", (string) $target); |
|
| 48 | } |
|
| 49 | ||
| 50 | public function verify($target) |
|
| 51 | { |
|
| 52 | ||
| 53 | $urls = $this->generateUrls($target); |
|
| 54 | ||
| 55 | $this->logger->info("\n"); |
|
| 56 | ||
| 57 | foreach ($urls as $url) { |
|
| 58 | if ($this->attack($url)) { |
|
| 59 | $this->logger->info('Is Vull'); |
|
| 60 | ||
| 61 | return true; |
|
| 62 | } |
|
| 63 | } |
|
| 64 | ||
| 65 | return false; |
|
| 66 | } |
|
| 67 | ||
| 68 | public function attack($url) |
|
| 69 | { |
|
| @@ 45-59 (lines=15) @@ | ||
| 42 | return (bool) preg_match("/\?|(.+?)\=/", $target); |
|
| 43 | } |
|
| 44 | ||
| 45 | protected function verify($target) |
|
| 46 | { |
|
| 47 | $urls = $this->generateUrls($target); |
|
| 48 | $this->logger->info('\n'); |
|
| 49 | ||
| 50 | foreach ($urls as $url) { |
|
| 51 | if ($this->attack($url)) { |
|
| 52 | $this->logger->info('Is Vull'); |
|
| 53 | ||
| 54 | return $url; |
|
| 55 | } |
|
| 56 | } |
|
| 57 | ||
| 58 | return false; |
|
| 59 | } |
|
| 60 | ||
| 61 | protected function attack($url) |
|
| 62 | { |
|
| @@ 45-60 (lines=16) @@ | ||
| 42 | return isset(parse_url($target)['query']); |
|
| 43 | } |
|
| 44 | ||
| 45 | protected function verify($target) |
|
| 46 | { |
|
| 47 | $urls = $this->generateUrlByExploit($target); |
|
| 48 | ||
| 49 | foreach ($urls as $url) { |
|
| 50 | $this->logger->info("\n url =>".$url."\n"); |
|
| 51 | ||
| 52 | if ($this->attack($url)) { |
|
| 53 | $this->logger->info('Is Vull'); |
|
| 54 | ||
| 55 | return true; |
|
| 56 | } |
|
| 57 | } |
|
| 58 | ||
| 59 | return false; |
|
| 60 | } |
|
| 61 | ||
| 62 | public function generateUrlByExploit($target) |
|
| 63 | { |
|
