cgiscan.cpp

cgi漏洞扫描,基于Qt实现,在Linux下进行编程,可实现跨来台特性.

/***************************************************************************
 *   Copyright (C) 2006 by root   *
 *   [e-mail]   *
 *                                                                         *
 *   This program is free software; you can redistribute it and/or modify  *
 *   it under the terms of the GNU General Public License as published by  *
 *   the Free Software Foundation; either version 2 of the License, or     *
 *   (at your option) any later version.                                   *
 *                                                                         *
 *   This program is distributed in the hope that it will be useful,       *
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
 *   GNU General Public License for more details.                          *
 *                                                                         *
 *   You should have received a copy of the GNU General Public License     *
 *   along with this program; if not, write to the                         *
 *   Free Software Foundation, Inc.,                                       *
 *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
 ***************************************************************************/


#include "cgiscan.h"

cgiscan::cgiscan(QWidget* parent, const char* name, WFlags fl)
: scandlg(parent,name,fl)
{
}

cgiscan::~cgiscan()
{
}

/*$SPECIALIZATION$*/
void cgiscan::scan()
{
    bug[0]="GET /index.htm HTTP/1.0\n\n";
    bug[1]="GET /index.html HTTP/1.0\n\n";
    bug[2]="GET /index.asp HTTP/1.0\n\n";
    bug[3]="GET /index.php HTTP/1.0\n\n";
    char *msg="HTTP/1.1 200 OK";
    sa.sin_family=AF_INET;
    host=gethostbyname(lineEdit->text());
    strncpy((char *)&sa.sin_addr,(char *)host->h_addr,sizeof(sa.sin_addr));
    sa.sin_port=htons(80);
    bzero(&(sa.sin_zero),8);
    textEdit->append("start scan---------------------------------------");;
    for(i=0;i<4;i++)
    {
        sd=socket(AF_INET,SOCK_STREAM,0);
        ::connect(sd,(struct sockaddr *)&sa,sizeof(struct sockaddr));
        send(sd,bug[i],strlen(bug[i]),0);
        recv(sd,buff,sizeof(buff),0);
        if(strstr(buff,msg)!=NULL)
        {
            memcpy(bugname,bug[i],strlen(bug[i]));
            memset(index(bugname,'\n'),'\0',1);
            sprintf(temp,"found cgi bug %s",bugname);
            textEdit->append(temp);
        }
        ::close(sd);
    }
    textEdit->append("scan end---------------------------------------");
}