Adding a new WAF script (varnish.py) · getcode2git/sqlmap@abd7608 · GitHub

getcode2git / sqlmap Public

forked from sqlmapproject/sqlmap

• Notifications You must be signed in to change notification settings
• Fork 0
• Star 0

• Code
• Pull requests
• Actions
• Projects
• Wiki
• Security and quality
• Insights

Additional navigation options

Commit abd7608

Browse filesBrowse the repository at this point in the historyBrowse files

stamparm

committed

Adding a new WAF script (varnish.py)

1 parent 3ff01f5 commit abd7608
Copy full SHA for abd7608

2 files changed

+29-1Lines changed: 29 additions & 1 deletion

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• doc
  • THANKS.md
• waf
  • varnish.py

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎doc/THANKS.md‎

Copy file name to clipboardExpand all lines: doc/THANKS.md

+4-1Lines changed: 4 additions & 1 deletion

• Display the source diff
• Display the rich diff

Original file line number	Diff line number	Diff line change
@@ -6,6 +6,9 @@ Andres Tarasco Acuna, <atarasco@gmail.com>
6	6	Santiago Accurso, <saccurso@skygear.com.ar>
7	7	* for reporting a bug
8	8
	9	+ Syed Afzal, <syed@syedafzal.in>
	10	+ * for contributing a WAF script varnish.py
	11	+
9	12	Zaki Akhmad, <zakiakhmad@gmail.com>
10	13	* for suggesting a couple of features
11	14
@@ -303,7 +306,7 @@ Michael Majchrowicz, <mmajchrowicz@gmail.com>
303	306	* for suggesting a lot of ideas and features
304	307
305	308	Ahmad Maulana, <matdhule@gmail.com>
306		- * for contributing one tamper script, halfversionedmorekeywords.py
	309	+ * for contributing a tamper script halfversionedmorekeywords.py
307	310
308	311	Ferruh Mavituna, <ferruh@mavituna.com>
309	312	* for exchanging ideas on the implementation of a couple of features

Collapse file

‎waf/varnish.py‎

Copy file name to clipboard

+25Lines changed: 25 additions & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -0,0 +1,25 @@
	1	+ #!/usr/bin/env python
	2	+
	3	+ """
	4	+ Copyright (c) 2006-2013 sqlmap developers (http://sqlmap.org/)
	5	+ See the file 'doc/COPYING' for copying permission
	6	+ """
	7	+
	8	+ import re
	9	+
	10	+ from lib.core.enums import HTTP_HEADER
	11	+ from lib.core.settings import WAF_ATTACK_VECTORS
	12	+
	13	+ __product__ = "Varnish FireWall (OWASP) "
	14	+
	15	+ def detect(get_page):
	16	+ retval = False
	17	+
	18	+ for vector in WAF_ATTACK_VECTORS:
	19	+ page, headers, code = get_page(get=vector)
	20	+ retval = headers.get("X-Varnish") is not None
	21	+ retval |= re.search(r"varnish\Z", headers.get(HTTP_HEADER.VIA, ""), re.I) is not None
	22	+ if retval:
	23	+ break
	24	+
	25	+ return retval

0 commit comments

Comments

0 (0)