Spaghetti, tarisa chengetedzo yako Webhu kunyorera

Munyaya inotevera tichazotarisa Spaghetti. Ichi chinovhurwa sosi sosi. Yakagadziriswa muPython uye izvo zvichatibvumidza isu kuongorora mawebhu webhu kutsvaga kwekushomeka kuitira kuti uvagadzirise. Iko kunyorera kwakagadzirirwa kutsvaga akasiyana default kana asina kuchengeteka mafaera, pamwe nekuona zvisizvo zvisizvo.

Nhasi, chero mushandisi ane ruzivo rudiki anogona kugadzira webhu kunyorera, ndosaka zviuru zvewebhu zvinoshandiswa zvinogadzirwa zuva nezuva. Dambudziko nderekuti mazhinji acho akagadzirwa asina kuteedzera mitsara yekuchengetedza. Kuti tirege kusiya mikova yakavhurika, tinogona kushandisa chirongwa ichi kuongorora kuti mawebhusaiti edu ari pamwero wakakwirira kana unogamuchirwa wekuchengetedza. Spaghetti inonakidza kwazvo uye iri nyore kushandisa kusagadzikana scanner.

Hukuru hunhu hweSpaghetti 0.1.0

Sezvo zvave zvakagadziriswa mukati python chokushandisa ichi kukwanisa kuurayiwa mune chero inoshanda system ita kuti ienderane ne python vhezheni 2.7.

Chirongwa chine chine simba "Fingerprinting”Izvi zvinotibvumira kuti titore ruzivo kubva kune webhu kunyorera. Pakati pezvose ruzivo iwe rwaunotora Ichi chishandiso chinoratidzira ruzivo rwakanangana neserura, hwaro hunoshandiswa mukuvandudza (CakePHP, CherryPy, Django, ...), ichatizivisa kana iine firewall inoshanda (Cloudflare, AWS, Barracuda, ...), kana yakagadziridzwa uchishandisa cms (Drupal, Joomla, Wordpress, nezvimwewo), iyo sisitimu inoshanda iyo inomhanya application

Isu tinogona zvakare kuwana ruzivo kubva kune manejimendi pani yewebhu kunyorera, kumashure masuo (kana paine chero) nezvimwe zvinhu zvakawanda. Uyezve, chirongwa ichi chinouya chakashongedzerwa nemamwe akateedzana anoshanda anoshanda. Zvese izvi tinogona kuzviita kubva kumagumo uye nenzira yakapusa.

Iko kushanda kwechirongwa ichi cheiyo terminal, kazhinji, kwave kunotevera. Pese patinomhanyisa chishandiso isu tinongofanirwa kusarudza iyo URL yewebhu webhu yatinoda kuongorora. Tichafanirwawo kuisa ma parameter anoenderana nekuita kwatinoda kushandisa. Ipapo chishandiso chichava mutariri wekugadzira inoenderana uye icharatidza mhedzisiro yakawanikwa.

Isu tinokwanisa kuwana kodhi yekushandisa uye maitiro ayo kubva papeji re Github yepurojekiti. Izvo zvinoshandiswa zvine simba uye zvirinyore kushandisa. Izvo zvinofanirwa zvakare kutaurwa kuti ine anoshanda kwazvo mugadziri, uyo anonyanya kugadzirisa maturusi ane chekuita nekuchengetedza komputa. Saka ini ndinofungidzira inotevera kudzokorora inyaya yenguva.

Isa Spaghetti 0.1.0

Muchikamu chino tichaisa paUbuntu 16.04, asi Spaghetti inogona kuiswa mune chero kugoverwa. Tinofanira chete une python 2.7 yakaiswa (padiki) uye mhanyisa unotevera mirairo:

git clone https://github.com/m4ll0k/Spaghetti.git
cd Spaghetti
pip install -r doc/requirements.txt
python spaghetti.py -h

Kana kumisikidza kwapera, tinogona kushandisa chishandiso mune ese mawebhu kunyorera atinoda kuongorora.

Shandisa Spaghetti

Izvo zvakakosha kuti uzive kuti mashandisiro akanyanya kunaka atingaite echishandiso ichi kutsvaga mikana yakavhurika yekuchengetedza mune edu webhu kunyorera. Nechirongwa ichi, mushure mekuwana kukanganisa kwekuchengeteka, zvinofanirwa kuve nyore kwatiri kuti tizvigadzirise (kana isu tiri ivo vanogadzira). Nenzira iyi tinogona kuita kuti zvishandiso zvedu zvive zvakachengeteka.

Kuti ushandise chirongwa ichi, sekutaura kwandamboita, kubva kumagumo (Ctrl + Alt + T) tichafanira kunyora chimwe chinhu seinotevera:

python spaghetti.py -u “objetivo” -s [0-3]

kana tinogona zvakare kushandisa:

python spaghetti.py --url “objetivo” --scan [0-3]

Kwamunoverenga "chinangwa" uchafanirwa kuisa iyo URL kuti uongorore. Nesarudzo- -i -url inonongedzera kuchinangwa chekutarisa, iyo-- saka -scan inotipa mikana yakasiyana kubva pa0 kusvika pa3. Unogona kutarisa zvakadzama zvinorehwa nerubatsiro rwechirongwa.

Kana tichida kuziva izvo zvinoita kuti zviwanikwe kwatiri, tinogona kushandisa rubatsiro rwuchazotiratidza pachiratidziri.

Hungave upenzi kusawana kuti vamwe vashandisi vanogona kutora mukana chishandiso ichi kuyedza kuwana webhu kunyorera ivo vasiri zvavo. Izvi zvinoenderana nehunhu hwemushandisi wega wega.