Scanner AddActivePlugins(Scanner Scan) { foreach (string Name in ActivePlugins) { Scan.AddCheck(Name); } return Scan; }
internal static Scanner GetScannerFromDB(int ScanID) { Scanner ScannerFromLog = null; using (SQLiteConnection DB = new SQLiteConnection("data source=" + IronProjectFile)) { DB.Open(); using (SQLiteCommand cmd = DB.CreateCommand()) { cmd.CommandText = "SELECT RequestHeaders, RequestBody, BinaryRequest, Status, InjectionPoints, FormatPlugin, SessionPlugin, ScanPlugins FROM ScanQueue WHERE ScanID=@ScanID LIMIT 1"; cmd.Parameters.AddWithValue("@ScanID", ScanID); using (SQLiteDataReader result = cmd.ExecuteReader()) { IronLogRecord ILR = new IronLogRecord(); ILR.RequestHeaders = result["RequestHeaders"].ToString(); ILR.RequestBody = result["RequestBody"].ToString(); ILR.IsRequestBinary = (result["BinaryRequest"].ToString().Equals("1")); Session Irse = Session.GetIronSessionFromIronLogRecord(ILR, 0); Request Req = Irse.Request; string Status = result["Status"].ToString(); string FormatPluginName = result["FormatPlugin"].ToString(); string SessionPluginName = result["SessionPlugin"].ToString(); string InjectionString = result["InjectionPoints"].ToString(); string[] ScanPluginsArray = result["ScanPlugins"].ToString().Split(new char[] { ',' }); ScannerFromLog = new Scanner(Req); ScannerFromLog.ScanID = ScanID; if (Status.Equals("Not Started")) return ScannerFromLog; if (SessionPluginName.Length > 0) { if (!SessionPluginName.Equals("None") && SessionPlugin.List().Contains(SessionPluginName)) { ScannerFromLog.SessionHandler = SessionPlugin.Get(SessionPluginName); } } if (FormatPluginName.Length > 0) { if (!FormatPluginName.Equals("None") && FormatPlugin.List().Contains(FormatPluginName)) { ScannerFromLog.BodyFormat = FormatPlugin.Get(FormatPluginName); } } if (ScanPluginsArray.Length > 0) { List<string> ValidScanPlugins = ActivePlugin.List(); foreach (string Name in ScanPluginsArray) { if (ValidScanPlugins.Contains(Name)) { ScannerFromLog.AddCheck(Name); } } } ScannerFromLog.AbsorbInjectionString(InjectionString); ScannerFromLog.Status = Status; } } } return ScannerFromLog; }
static void DoScan() { Spider = new Crawler(); try { Spider.PrimaryHost = PrimaryHost; Spider.BaseUrl = BaseUrl; Spider.StartingUrl = StartingUrl; Spider.PerformDirAndFileGuessing = PerformDirAndFileGuessing; Spider.IncludeSubDomains = IncludeSubDomains; Spider.HTTP = HTTP; Spider.HTTPS = HTTPS; Spider.UrlsToAvoid = UrlsToAvoid; Spider.HostsToInclude = HostsToInclude; Spider.SpecialHeader = SpecialHeader; Spider.Start(); } catch(Exception Exp) { IronException.Report("Error starting Crawler", Exp); try { Stop(); } catch { } return; } ScanItemUniquenessChecker UniqueChecker = new ScanItemUniquenessChecker(CanPromptUser); List<int> ScanIDs = new List<int>(); bool ScanActive = true; List<string> ActivePlugins = ActivePlugin.List(); int TotalRequestsCrawled = 0; int TotalScanJobsCreated = 0; int TotalScanJobsCompleted = 0; List<Request> ScannedRequests = new List<Request>(); int SleepCounter = 0; while (ScanActive) { ScanActive = false; List<Request> Requests = Spider.GetCrawledRequests(); if (Stopped) return; if (Requests.Count > 0 || Spider.IsActive()) { ScanActive = true; if (CrawlAndScan) { TotalRequestsCrawled = TotalRequestsCrawled + Requests.Count; //update the ui with the number of requests crawled foreach (Request Req in Requests) { if (Stopped) return; if (!CanScan(Req)) continue; if (!UniqueChecker.IsUniqueToScan(Req, ScannedRequests, false)) continue; try { Scanner S = new Scanner(Req); foreach (string Check in Checks) { S.AddCheck(Check); } if (InjectQuery) { if (QueryWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (QueryWhiteList.Contains(Name)) S.InjectQuery(Name); } } else if (QueryBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (!QueryBlackList.Contains(Name)) S.InjectQuery(Name); } } else { S.InjectQuery(); } } if (InjectBody) { if (BodyWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (BodyWhiteList.Contains(Name)) S.InjectBody(Name); } } else if (BodyBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (!BodyBlackList.Contains(Name)) S.InjectBody(Name); } } else { S.InjectBody(); } } if (InjectCookie) { if (CookieWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (CookieWhiteList.Contains(Name)) S.InjectCookie(Name); } } else if (CookieBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (!CookieBlackList.Contains(Name)) S.InjectCookie(Name); } } else { S.InjectCookie(); } } if (InjectHeaders) { if (HeaderWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (HeaderWhiteList.Contains(Name)) S.InjectHeaders(Name); } } else if (HeaderBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (!HeaderBlackList.Contains(Name)) S.InjectHeaders(Name); } } else { S.InjectHeaders(); } } if (InjectUrlPathParts) { if (S.OriginalRequest.Query.Count == 0 && S.OriginalRequest.File.Length == 0) S.InjectUrl(); } if (S.InjectionPointsCount == 0) continue; TotalScanJobsCreated++; if (Stopped) return; int ScanID = S.LaunchScan(); if (Stopped) { Stop(true); return; } if (ScanID > 0) { ScannedRequests.Add(Req); ScanIDs.Add(ScanID); } } catch(Exception Exp) { IronException.Report(string.Format("Error creating Scan Job with Request - {0}", Req.Url), Exp); } } } } if (CrawlAndScan) { List<int> ScanIDsToRemove = new List<int>(); List<int> AbortedScanIDs = Scanner.GetAbortedScanIDs(); List<int> CompletedScanIDs = Scanner.GetCompletedScanIDs(); for (int i = 0; i < ScanIDs.Count; i++) { if (Stopped) return; if (CompletedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); TotalScanJobsCompleted++; } else if (AbortedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); } } for (int i = 0; i < ScanIDsToRemove.Count; i++) { if (Stopped) return; ScanIDs.RemoveAt(ScanIDsToRemove[i] - i); } } if (ScanActive) { Thread.Sleep(2000); } else { if (ScanIDs.Count > 0) { ScanActive = true; Thread.Sleep(5000); } else if (SleepCounter < 10) { ScanActive = true; Thread.Sleep(2000); SleepCounter = SleepCounter + 2; } } if (Stopped) return; IronUI.UpdateConsoleCrawledRequestsCount(TotalRequestsCrawled); IronUI.UpdateConsoleScanJobsCreatedCount(TotalScanJobsCreated); IronUI.UpdateConsoleScanJobsCompletedCount(TotalScanJobsCompleted); } if (Stopped) return; Stop(); }