Fitur
- Xss Attack Detection
- Sensitif Information
Install python 3.x.x
$ git clone https://github.com/wahyuhadi/AutoSecurity-Check.git
$ python apps.py -h
$ python apps.py -u 'https://web.com/browse?keywords=aaaaaaa' -m xss -t all
[+] Get HTML data from URL ..
[+] Checking from all tags html
[+] Indentification html Response ..
[+] Unescape html indentified aaaaaaa"checkxss true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa> true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa< true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa( true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa) true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa! true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa% true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa@ true
[-->] Posible Parameter in URL keywords
[+] Unescape html indentified aaaaaaa'checkxss true
[-->] Posible Parameter in URL keywords
[+] Checking Xss Payload ...
[+] Unescape html indentified aaaaaaa<script>alert("xss found") true
[-->] Posible Xss Parameter in URL Found https://web.id/browse?keywords=aaaaaaa<script>alert("xss found");</script>
[+] Unescape html indentified aaaaaaa"><script>alert("xss found") true
[-->] Posible Xss Parameter in URL Found https://web.id/browse?keywords=aaaaaaa"><script>alert("xss found");</script>
[+] Unescape html indentified aaaaaaa<script>alert('xss found') true
[-->] Posible Xss Parameter in URL Found https://web.id/browse?keywords=aaaaaaa<script>alert('xss found');</script>
[+] Unescape html indentified aaaaaaa'><script>alert('xss found') true
[-->] Posible Xss Parameter in URL Found https://web.id/browse?keywords=aaaaaaa'><script>alert('xss found');</script>
[+] Total request 14
[-] Request Success 14
[-] Error Request 0
[!] Process end with time 0:00:08.765309
$ python apps.py -u 'https://web.com' -m info
[INFO] Checking information form server ...
[+] Web Server Found nginx/1.14.1
[Advice] Hardening your servers
[+] Backend Technology Found PHP/5.6.38
[Advice] Hardening your servers
[INFO] Checking Critical URL ..
[WARNING] Critical link found https://web.id/.env
[WARNING] Critical link found https://web.id/.git/config
[WARNING] Critical link found https://web.id/phpmyadmin
[WARNING] Critical link found https://web.id/artisan
[WARNING] Critical link found https://web.id/.htaccess
[WARNING] Critical link found https://web.id/robot.txt
[WARNING] Critical link found https://web.id/db.sq
[INFO] Scanning Port Server https://web.id ..
[-->] Scanning IP : xx.xx.xx.xx
[WARNING] FTP connection is open, Posible to brute force, Version Pure-FTPd
[WARNING] 230 Anonymous user logged in
drwxr-xr-x 2 0 0 22 Feb 23 2019 .
drwxr-xr-x 2 0 0 6 Feb 23 2019 ..
ls command execute 226-Options: -a -l
226 2 matches total
© Rahmat Wahyu Hadi - 2019-02-20