url_func.inc

漏洞扫描源码,可以扫描linux,windows,交换机路由器

# Implementation of nessus compatible includes
# Vlatko Kosturjak <[e-mail]>
# Distributed under GPL
# URL encode & decode functions:
# Chandan S([e-mail])

global_var HEX_LOWERCASE, HEX_UPPERCASE;
HEX_LOWERCASE=1;
HEX_UPPERCASE=2;

# function taken from amap.nasl which is GPL
function url_hex2raw(s)
{
 local_var i, j, ret, l;

 s = chomp(s);  # remove trailing blanks, CR, LF...
 l = strlen(s);
 if (l % 2) display("hex2raw: odd string: ", s, "\n");
 for(i=0;i<l;i+=2)
 {
  if(ord(s[i]) >= ord("0") && ord(s[i]) <= ord("9"))
	j = int(s[i]);
  else
	j = int((ord(s[i]) - ord("a")) + 10);

  j *= 16;
  if(ord(s[i+1]) >= ord("0") && ord(s[i+1]) <= ord("9"))
	j += int(s[i+1]);
  else
	j += int((ord(s[i+1]) - ord("a")) + 10);
  ret += raw_string(j);
 }
 return ret;
}

 ###############################################################
 # Function Name 'urlencode'
 ###############################################################
 
 function urlencode(str, unreserved)
 {
        local_var estr;
        char_set = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
        num_set = "0123456789";
        specl_char_set = "_-.!~*'()";
        unreserv_chars = char_set + num_set + specl_char_set;
 
        if(unreserved != NULL){
                unreserv_chars = unreserv_chars + unreserved;
        }
 
        for(i=0; i<strlen(str); i++)
        {
                flag = "non_word";
 
                # Encode on any non word character
                for(j=0; j<strlen(unreserv_chars); j++)
                {
                        if (str[i] == unreserv_chars[j])
                        {
                                flag = "word";
                                break;
                        }
                }
 
                if(flag == "non_word"){
                        estr = estr + '%' + hexstr(str[i]);
                }
                else{
                        estr = estr + str[i];
                }
        }
        return(estr);
 }


 ###############################################################
 # Function Name 'urldecode'
 ###############################################################
 
 function urldecode(estr)
 {
        local_var dstr;
 
        for(i=0; i<strlen(estr); i++)
        {
                if(estr[i] == '%')
                {
                        dstr = dstr + url_hex2raw(s:tolower(estr[i+1] + estr[i+2]));
                        i = i + 2;
                }
                else if(estr[i] == '+')
                {
                        dstr = dstr + ' ';
                        i = i + 1;
                }
                else{
                        dstr = dstr + estr[i];
                }
        }
        dstr = ereg_replace(string:dstr, pattern:"<!--(.|\n)*-->", replace:"", icase:1);
        return(dstr);
 }