Skip to content
This repository has been archived by the owner on Jan 17, 2019. It is now read-only.

Commit

Permalink
release 1.2.0
Browse files Browse the repository at this point in the history
  • Loading branch information
Ekultek committed Sep 11, 2016
1 parent 600773b commit 475d1c9
Show file tree
Hide file tree
Showing 8 changed files with 152 additions and 208 deletions.
327 changes: 133 additions & 194 deletions .idea/workspace.xml

Large diffs are not rendered by default.

Binary file modified README.md
Binary file not shown.
3 changes: 3 additions & 0 deletions docs/CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@
- Removed commented out code that is now deprecated
- Made the program a little quicker
- Added proxy support, use the --proxy flag
- Added a dry run and batch flag
- Edited the readme to reflect changes
- Bumped version number

#Version 1.1.1
- Minor text and grammatical fixes
Expand Down
2 changes: 1 addition & 1 deletion lib/misc/spider.rb
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ def spider

# The version the program is currently in
def version
'1.1.1' # Version number
'1.2.0' # Version number
end

end
Expand Down
15 changes: 7 additions & 8 deletions lib/modules/detection.rb
Original file line number Diff line number Diff line change
@@ -1,7 +1,13 @@
#
# Scan the URL for multiple parameters
#
module MultipleParameters

class TestAllParameters

# Add if multiple parameters are found
#
# @param [String] site to check for
def check_for_multiple_parameters(site, syntax)
if site.scan("=") != 1
site.gsub!("=", "=" + syntax)
Expand All @@ -10,11 +16,4 @@ def check_for_multiple_parameters(site, syntax)

end

end


##
# Test
#
#test = MultipleParameters::TestAllParameters.new
#test.check_for_multiple_parameters("http://multiplexstimulator.com/catalog/product.php?cat_id=82&pid=157&view=print", "`")
end
3 changes: 3 additions & 0 deletions lib/modules/expansion/string_expan.rb
Original file line number Diff line number Diff line change
@@ -1,3 +1,6 @@
#
# String expansion for colored output
#
class String
def black; "\e[30m#{self}\e[0m" end
def red; "\e[31m#{self}\e[0m" end
Expand Down
1 change: 1 addition & 0 deletions lib/modules/format.rb
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ def warning(input)
puts "[#{Time.now.strftime("%T").purple} " + "WARNING".yellow + "] " + "#{input.yellow}"
end

# Prompt for information when there's a dry run done
def prompt(input)
print "#{input}: ".yellow
STDIN.gets.chomp
Expand Down
9 changes: 4 additions & 5 deletions whitewidow.rb
Original file line number Diff line number Diff line change
Expand Up @@ -82,9 +82,9 @@ def format_file
def get_urls
query = SEARCH

File.read("#{PATH}/log/query_blacklist").each_line do |blacked|
File.read("#{PATH}/log/query_blacklist").each_line do |blacked| # Check if the query is blacklisted or not
if query == blacked
query = File.readlines("#{PATH}/lib/lists/search_query.txt").sample
query = File.readlines("#{PATH}/lib/lists/search_query.txt").sample # If it is, change it.
end
end

Expand All @@ -104,14 +104,13 @@ def get_urls
str = link.href.to_s
str_list = str.split(%r{=|&})
urls = str_list[1]
next if urls.split("/")[2].start_with? *SKIP
#check_urls_for_blacklist(urls)
next if urls.split("/")[2].start_with? *SKIP # Skip all the bad URLs
urls_to_log = URI.decode(urls)
FORMAT.success("Site found: #{urls_to_log}")
sleep(0.5)
%w(' ` -- ;).each { |sql|
MULTIPARAMS.check_for_multiple_parameters(urls_to_log, sql)
File.open("#{PATH}/tmp/SQL_sites_to_check.txt", 'a+') { |s| s.puts("#{urls_to_log}#{sql}") }
File.open("#{PATH}/tmp/SQL_sites_to_check.txt", 'a+') { |s| s.puts("#{urls_to_log}#{sql}") } # Add sql syntax to all "="
}
end
end
Expand Down

0 comments on commit 475d1c9

Please sign in to comment.