Scanner SetInjectionPoints(Scanner S) { if (ScanQuery) { if (QueryWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (QueryWhiteList.Contains(Name)) S.InjectQuery(Name); } } else if (QueryBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (!QueryBlackList.Contains(Name)) S.InjectQuery(Name); } } else { S.InjectQuery(); } } if (ScanBody) { if (BodyWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (BodyWhiteList.Contains(Name)) S.InjectBody(Name); } } else if (BodyBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (!BodyBlackList.Contains(Name)) S.InjectBody(Name); } } else { S.InjectBody(); } } if (ScanCookie) { if (CookieWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (CookieWhiteList.Contains(Name)) S.InjectCookie(Name); } } else if (CookieBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (!CookieBlackList.Contains(Name)) S.InjectCookie(Name); } } else { S.InjectCookie(); } } if (ScanHeaders) { if (HeaderWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (HeaderWhiteList.Contains(Name)) S.InjectHeaders(Name); } } else if (HeaderBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (!HeaderBlackList.Contains(Name)) S.InjectHeaders(Name); } } else { S.InjectHeaders(); } } if (ScanUrl) { if (S.OriginalRequest.Query.Count == 0 && S.OriginalRequest.File.Length == 0) S.InjectUrl(); } return S; }
static Scanner SetInjectionPoints(Scanner Scan) { if (ScanUrl) Scan.InjectUrl(); if (ScanQuery && SelectCheckQueryParameters && (SelectCheckQueryParametersPlus || SelectCheckQueryParametersMinus)) { if (SelectCheckQueryParametersPlus) { foreach (string Name in Scan.OriginalRequest.Query.GetNames()) { if (SelectQueryParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Query.GetAll(Name).Count; i++) { Scan.InjectQuery(Name, i); } } } } else { foreach (string Name in Scan.OriginalRequest.Query.GetNames()) { if (!DontSelectQueryParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Query.GetAll(Name).Count; i++) { Scan.InjectQuery(Name, i); } } } } } else { if (ScanQuery) Scan.InjectQuery(); } if (Scan.BodyFormat.Name.Length > 0) { string Xml = Scan.BodyFormat.ToXmlFromRequest(Scan.OriginalRequest); string[,] XmlArray = IronWASP.FormatPlugin.XmlToArray(Xml); Scan.BodyXmlInjectionParameters = new Parameters(); for (int i = 0; i < XmlArray.GetLength(0); i++) { Scan.BodyXmlInjectionParameters.Add(XmlArray[i,0], XmlArray[i,1]); } } if (ScanBody && SelectCheckBodyParameters && (SelectCheckBodyParametersPlus || SelectCheckBodyParametersMinus)) { if (SelectCheckBodyParametersPlus) { if (Scan.BodyFormat.Name.Length == 0) { foreach (string Name in Scan.OriginalRequest.Body.GetNames()) { if (SelectBodyParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Body.GetAll(Name).Count; i++) { Scan.InjectBody(Name, i); } } } } else { int i = 0; foreach (string Name in Scan.BodyXmlInjectionParameters.GetNames()) { if (SelectBodyParameters.Contains(Name)) { Scan.InjectBody(i); } i++; } } } else { if (Scan.BodyFormat.Name.Length == 0) { foreach (string Name in Scan.OriginalRequest.Body.GetNames()) { if (!DontSelectBodyParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Body.GetAll(Name).Count; i++) { Scan.InjectBody(Name, i); } } } } else { int i = 0; foreach (string Name in Scan.BodyXmlInjectionParameters.GetNames()) { if (!DontSelectBodyParameters.Contains(Name)) { Scan.InjectBody(i); } i++; } } } } else { if (ScanBody) Scan.InjectBody(); } if (ScanCookie && SelectCheckCookieParameters && (SelectCheckCookieParametersPlus || SelectCheckCookieParametersMinus)) { if (SelectCheckCookieParametersPlus) { foreach (string Name in Scan.OriginalRequest.Cookie.GetNames()) { if (SelectCookieParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Cookie.GetAll(Name).Count; i++) { Scan.InjectCookie(Name, i); } } } } else { foreach (string Name in Scan.OriginalRequest.Cookie.GetNames()) { if (!DontSelectCookieParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Cookie.GetAll(Name).Count; i++) { Scan.InjectCookie(Name, i); } } } } } else { if (ScanCookie) Scan.InjectCookie(); } if (ScanHeaders && SelectCheckHeadersParameters && (SelectCheckHeadersParametersPlus || SelectCheckHeadersParametersMinus)) { if (SelectCheckHeadersParametersPlus) { foreach (string Name in Scan.OriginalRequest.Headers.GetNames()) { if (SelectHeadersParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Headers.GetAll(Name).Count; i++) { Scan.InjectHeaders(Name, i); } } } } else { foreach (string Name in Scan.OriginalRequest.Headers.GetNames()) { if (!DontSelectHeadersParameters.Contains(Name)) { for (int i = 0; i < Scan.OriginalRequest.Headers.GetAll(Name).Count; i++) { Scan.InjectHeaders(Name, i); } } } } } else { if (ScanHeaders) Scan.InjectHeaders(); } return Scan; }
static void DoScan() { Spider = new Crawler(); Spider.PrimaryHost = PrimaryHost; Spider.BaseUrl = BaseUrl; Spider.StartingUrl = StartingUrl; Spider.PerformDirAndFileGuessing = PerformDirAndFileGuessing; Spider.IncludeSubDomains = IncludeSubDomains; Spider.HTTP = HTTP; Spider.HTTPS = HTTPS; Spider.UrlsToAvoid = UrlsToAvoid; Spider.HostsToInclude = HostsToInclude; Spider.Start(); ScanItemUniquenessChecker UniqueChecker = new ScanItemUniquenessChecker(Mode != ScanMode.Default); List<int> ScanIDs = new List<int>(); bool ScanActive = true; List<string> ActivePlugins = ActivePlugin.List(); int TotalRequestsCrawled = 0; int TotalScanJobsCreated = 0; int TotalScanJobsCompleted = 0; List<Request> ScannedRequests = new List<Request>(); int SleepCounter = 0; while (ScanActive) { ScanActive = false; List<Request> Requests = Spider.GetCrawledRequests(); if (Stopped) return; if (Requests.Count > 0 || Spider.IsActive()) { ScanActive = true; if (CrawlAndScan) { TotalRequestsCrawled = TotalRequestsCrawled + Requests.Count; //update the ui with the number of requests crawled foreach (Request Req in Requests) { if (Stopped) return; if (!CanScan(Req)) continue; if (!UniqueChecker.IsUniqueToScan(Req, ScannedRequests, false)) continue; Scanner S = new Scanner(Req); S.CheckAll(); if (S.OriginalRequest.Query.Count == 0 && S.OriginalRequest.File.Length != 3 && S.OriginalRequest.File.Length != 4) S.InjectUrl(); S.InjectQuery(); S.InjectBody(); S.InjectHeaders(); S.InjectCookie(); if (!FormatPlugin.IsNormal(Req)) { List<FormatPlugin> RightList = FormatPlugin.Get(Req); if (RightList.Count > 0) { S.BodyFormat = RightList[0]; } } if (S.InjectionPointsCount == 0) continue; TotalScanJobsCreated++; if (Stopped) return; int ScanID = S.LaunchScan(); if (Stopped) { Stop(true); return; } if (ScanID > 0) { ScannedRequests.Add(Req); ScanIDs.Add(ScanID); } } } } if (CrawlAndScan) { List<int> ScanIDsToRemove = new List<int>(); List<int> AbortedScanIDs = Scanner.GetAbortedScanIDs(); List<int> CompletedScanIDs = Scanner.GetCompletedScanIDs(); for (int i = 0; i < ScanIDs.Count; i++) { if (Stopped) return; if (CompletedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); TotalScanJobsCompleted++; } else if (AbortedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); } } for (int i = 0; i < ScanIDsToRemove.Count; i++) { if (Stopped) return; ScanIDs.RemoveAt(ScanIDsToRemove[i] - i); } } if (ScanActive) { Thread.Sleep(2000); } else { if (ScanIDs.Count > 0) { ScanActive = true; Thread.Sleep(5000); } else if (SleepCounter < 10) { ScanActive = true; Thread.Sleep(2000); SleepCounter = SleepCounter + 2; } } if (Stopped) return; IronUI.UpdateConsoleCrawledRequestsCount(TotalRequestsCrawled); IronUI.UpdateConsoleScanJobsCreatedCount(TotalScanJobsCreated); IronUI.UpdateConsoleScanJobsCompletedCount(TotalScanJobsCompleted); } if (Stopped) return; Stop(); }
static void DoScan() { Spider = new Crawler(); try { Spider.PrimaryHost = PrimaryHost; Spider.BaseUrl = BaseUrl; Spider.StartingUrl = StartingUrl; Spider.PerformDirAndFileGuessing = PerformDirAndFileGuessing; Spider.IncludeSubDomains = IncludeSubDomains; Spider.HTTP = HTTP; Spider.HTTPS = HTTPS; Spider.UrlsToAvoid = UrlsToAvoid; Spider.HostsToInclude = HostsToInclude; Spider.SpecialHeader = SpecialHeader; Spider.Start(); } catch(Exception Exp) { IronException.Report("Error starting Crawler", Exp); try { Stop(); } catch { } return; } ScanItemUniquenessChecker UniqueChecker = new ScanItemUniquenessChecker(CanPromptUser); List<int> ScanIDs = new List<int>(); bool ScanActive = true; List<string> ActivePlugins = ActivePlugin.List(); int TotalRequestsCrawled = 0; int TotalScanJobsCreated = 0; int TotalScanJobsCompleted = 0; List<Request> ScannedRequests = new List<Request>(); int SleepCounter = 0; while (ScanActive) { ScanActive = false; List<Request> Requests = Spider.GetCrawledRequests(); if (Stopped) return; if (Requests.Count > 0 || Spider.IsActive()) { ScanActive = true; if (CrawlAndScan) { TotalRequestsCrawled = TotalRequestsCrawled + Requests.Count; //update the ui with the number of requests crawled foreach (Request Req in Requests) { if (Stopped) return; if (!CanScan(Req)) continue; if (!UniqueChecker.IsUniqueToScan(Req, ScannedRequests, false)) continue; try { Scanner S = new Scanner(Req); foreach (string Check in Checks) { S.AddCheck(Check); } if (InjectQuery) { if (QueryWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (QueryWhiteList.Contains(Name)) S.InjectQuery(Name); } } else if (QueryBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Query.GetNames()) { if (!QueryBlackList.Contains(Name)) S.InjectQuery(Name); } } else { S.InjectQuery(); } } if (InjectBody) { if (BodyWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (BodyWhiteList.Contains(Name)) S.InjectBody(Name); } } else if (BodyBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Body.GetNames()) { if (!BodyBlackList.Contains(Name)) S.InjectBody(Name); } } else { S.InjectBody(); } } if (InjectCookie) { if (CookieWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (CookieWhiteList.Contains(Name)) S.InjectCookie(Name); } } else if (CookieBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Cookie.GetNames()) { if (!CookieBlackList.Contains(Name)) S.InjectCookie(Name); } } else { S.InjectCookie(); } } if (InjectHeaders) { if (HeaderWhiteList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (HeaderWhiteList.Contains(Name)) S.InjectHeaders(Name); } } else if (HeaderBlackList.Count > 0) { foreach (string Name in S.OriginalRequest.Headers.GetNames()) { if (!HeaderBlackList.Contains(Name)) S.InjectHeaders(Name); } } else { S.InjectHeaders(); } } if (InjectUrlPathParts) { if (S.OriginalRequest.Query.Count == 0 && S.OriginalRequest.File.Length == 0) S.InjectUrl(); } if (S.InjectionPointsCount == 0) continue; TotalScanJobsCreated++; if (Stopped) return; int ScanID = S.LaunchScan(); if (Stopped) { Stop(true); return; } if (ScanID > 0) { ScannedRequests.Add(Req); ScanIDs.Add(ScanID); } } catch(Exception Exp) { IronException.Report(string.Format("Error creating Scan Job with Request - {0}", Req.Url), Exp); } } } } if (CrawlAndScan) { List<int> ScanIDsToRemove = new List<int>(); List<int> AbortedScanIDs = Scanner.GetAbortedScanIDs(); List<int> CompletedScanIDs = Scanner.GetCompletedScanIDs(); for (int i = 0; i < ScanIDs.Count; i++) { if (Stopped) return; if (CompletedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); TotalScanJobsCompleted++; } else if (AbortedScanIDs.Contains(ScanIDs[i])) { ScanIDsToRemove.Add(i); } } for (int i = 0; i < ScanIDsToRemove.Count; i++) { if (Stopped) return; ScanIDs.RemoveAt(ScanIDsToRemove[i] - i); } } if (ScanActive) { Thread.Sleep(2000); } else { if (ScanIDs.Count > 0) { ScanActive = true; Thread.Sleep(5000); } else if (SleepCounter < 10) { ScanActive = true; Thread.Sleep(2000); SleepCounter = SleepCounter + 2; } } if (Stopped) return; IronUI.UpdateConsoleCrawledRequestsCount(TotalRequestsCrawled); IronUI.UpdateConsoleScanJobsCreatedCount(TotalScanJobsCreated); IronUI.UpdateConsoleScanJobsCompletedCount(TotalScanJobsCompleted); } if (Stopped) return; Stop(); }