CmsVulnDetect/Cms.py at master · daloji/CmsVulnDetect · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
#! /usr/bin/env python
# -*- coding: utf-8 -*-
import sys
import abc
import urllib2
import re
from PageParser import PageParser

REGEX = {
    'Drupal'  : 'Drupal \s*?([\d.]+),',
    'WordPress' : 'Version\s*?([\d.]+)',
    'Joomla' : 'Joomla\s*?([\d.]+)'
      }

FILE  = {
    'Drupal'  : 'CHANGELOG.txt',
    'WordPress' : 'readme.html',
    'Joomla' : 'README.txt'
      }

class Cms:

    def __init__(self,url):
        self.agent = 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7'
        self.headers = {'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11',
       'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
       'Accept-Charset': 'ISO-8859-1,utf-8;q=0.7,*;q=0.3',
       'Accept-Encoding': 'none',
       'Accept-Language': 'en-US,en;q=0.8',
       'Connection': 'keep-alive'}
        self.url = url
        self.Modules_List=[]
	self.Theme_List=[]
	self.version = None
        self.error = ""

    @abc.abstractmethod
    def scan(self):
        """Debut scan de la cible ."""
        return

    def detection(self):
	self.verbose("\t *  Detection Thèmes, plugins et modules")
	try:
	    response = urllib2.Request(self.url, None, headers=self.headers)
	    data =  urllib2.urlopen(response).read().decode('utf-8')
	    parse = PageParser(self.url)
	    parse.feed(data)
	    self.Modules_List=parse.getAllModules()
	    self.Modules_List=sorted(list(set(self.Modules_List)))
	    self.__deleteJQueryModules()
	    self.Theme_List=parse.getAllThemes()
	    self.Theme_List=sorted(list(set(self.Theme_List)))
	except urllib2.HTTPError, e:
	     self.error = e


    def __deleteJQueryModules(self):
      if len(self.Modules_List) > 0:
	for module in self.Modules_List:
	    if "jquery." in module:
		self.Modules_List.remove(module)


    def getVersion(self,type):
      """ recuperation de la version """
      file = None
      regex = None
      for keys in FILE:
	 if keys == type:
	   file = FILE[keys]
	   regex = REGEX[keys]

      if file is None or regex is None:
	 return

      try:
	 response = urllib2.Request(self.url+'/'+file, None, headers=self.headers)
	 data =  urllib2.urlopen(response).read()
	 pattern = re.compile(regex,re.MULTILINE)
	 result =  re.findall(pattern,data)[:1]
	 if len(result)>0:
	     self.version=result[0]

      except urllib2.HTTPError, e:
	  self.error = e

    def verbose(self,msg):
	sys.stderr.write(" %s\n" % (msg))


    def showThemes(self):
      if len(self.Theme_List)>0:
	theme =""
	for thm in self.Theme_List:
	     theme = theme + "  " + thm

	self.verbose("\t -  themes[*]  " +theme)


    def showPlugins(self):
      if len(self.Modules_List)>0:
	module =""
	for modl in self.Modules_List:
	     module = module + "  " + modl

	self.verbose("\t -  modules[*]  " +module)