CVE.py

#!/usr/bin/env python3


from modules.cp_cve.CVE20235256 import drupaljsonapi
from modules.cp_cve.CVE201919326 import silverstripe
from modules.cp_cve.CVE202127577 import apache_cp
from modules.cp_cve.CVE202446982 import datareq_check
from modules.cp_cve.CVE202447374 import litespeed
from modules.cp_cve.CVE202527415 import nuxt_check
from modules.cp_cve.CVE202529927 import middleware
from modules.cp_cve.CVE202549826 import nextjs_204
from modules.cp_cve.CVE202557822 import nextjs_ssrf
from modules.cp_cve.CVE202644581 import nextjs_csp_nonce
from utils.style import Colors
from utils.utils import configure_logger, random, requests, sys

logger = configure_logger(__name__)

DEFAULT_USER_AGENT = (
    "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; LCJB; rv:11.0) like Gecko"
)


def run_cve_modules(
    url: str,
    s: requests.Session,
    req_main: requests.Response,
    custom_header: dict,
    authent: tuple[str, str] | None,
) -> None:
    uri = f"{url}?cve={random.randint(1, 999)}"
    s.headers.update({"User-Agent": DEFAULT_USER_AGENT})

    try:
        req_main = s.get(
            uri,
            headers=custom_header,
            verify=False,
            allow_redirects=False,
            timeout=15,
            auth=authent,
        )
        logger.debug(req_main.content)

        datareq_check(url, s, req_main, custom_header, authent)
        silverstripe(uri, s, req_main, custom_header, authent)
        litespeed(url)
        drupaljsonapi(url, custom_header)
        nuxt_check(url, s, req_main, custom_header, authent)
        middleware(url, s, custom_header)
        nextjs_204(url, s)
        apache_cp(url, authent)
        nextjs_ssrf(url)
        nextjs_csp_nonce(url, s, req_main, authent)

        # TODO:https://labs.withsecure.com/advisories/plone-cms-cache-poisoning-xss-vulnerability
        # TODO:https://github.com/ZephrFish/F5-CVE-2022-1388-Exploit/tree/main

    except requests.Timeout as t:
        logger.error(f"Timeout Error: {t}")
    except KeyboardInterrupt:
        print("Exiting")
        sys.exit()
    except Exception as e:
        logger.exception(e)


def check_cpcve(
    url: str,
    s: requests.Session,
    req_main: requests.Response,
    custom_header: dict,
    authent: tuple[str, str] | None,
    fp_results: tuple[int, int] | None,
    human: str,
) -> None:
    if req_main.status_code in [301, 302]:
        url = (
            req_main.headers["location"]
            if "http" in req_main.headers["location"]
            else f'{url}{req_main.headers["location"]}'
        )

    print(f"{Colors.CYAN} ├ CP CVE analysis{Colors.RESET}")

    run_cve_modules(url, s, req_main, custom_header, authent)