-
Notifications
You must be signed in to change notification settings - Fork 0
/
simba
167 lines (146 loc) · 6.63 KB
/
simba
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
#!/usr/bin/python3
import optparse
import socket
import re
import requests
import sys
import os
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
white = "\033[1;37m"
green = '\033[1;32;48m'
bgreen = '\033[1;32m'
bred = '\033[1;31m'
noclr = '\033[0m'
bblue = '\033[1;34m'
cyan = '\033[0;36m'
orng = '\033[0;33m'
print(f'''\nSimba-{bred}v(1.5){noclr}
Author: {bred}z3r0day{noclr}
{white}Copyright (c) 2021{noclr}
{bgreen}[web headers security scanner]{noclr}\n''')
user_agent_headers = {
'googlebot': 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)',
'chrome_win': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36',
'chrome_mac': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 12_0_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36',
'chrome_linux': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36',
'chrome_iphone': 'Mozilla/5.0 (iPhone; CPU iPhone OS 15_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/96.0.4664.36 Mobile/15E148 Safari/604.1',
'chrome_android': 'Mozilla/5.0 (Linux; Android 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.50 Mobile Safari/537.36',
'firefox_win': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0',
'firefox_linux': 'Mozilla/5.0 (Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0',
'firefox_mac': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 12.0; rv:94.0) Gecko/20100101 Firefox/94.0',
'firefox_iphone': 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/39.0 Mobile/15E148 Safari/605.1.15',
'firefox_android': 'Mozilla/5.0 (Android 12; Mobile; rv:68.0) Gecko/68.0 Firefox/94.0'
}
def uagent_header_parse(header_value):
try:
if header_value != None:
user_agent_header = user_agent_headers[header_value]
return user_agent_header
except:
print(f"[{bred}Error{noclr}] User-Agent Not Found")
options_display = f'''
{bred}User-Agent{noclr} options
- googlebot
- chrome_win
- chrome_linux
- chrome_iphone
- chrome_mac
- chrome_android
Similarly for {bgreen}firefox{noclr} also add the OS name as shown above
- firefox_*OS*
\n'''
print(options_display)
sys.exit(0)
def check_https(web_resp):
if 'https' in web_resp.url:
return True
else:
return False
def check_file_existence(file_path):
if os.path.exists(file_path) == False:
return False
else:
return True
def parse_weburl(url):
if not url[-1] == '/':
url = url + '/'
return url
else:
return url
def header_scan(web_response):
headers = web_response.headers
if check_https(web_rsp):
print(f"[{bblue}INFO{noclr}] website is running {cyan}HTTPS{noclr}")
scan_header('Server', headers)
scan_header('Strict-Transport-Security', headers)
scan_header('Content-Security-Policy', headers)
scan_header('X-Frame-Options', headers)
scan_header('X-XSS-Protection', headers)
print("")
else:
print(f"[{bblue}INFO{noclr}] website is running {cyan}HTTP{noclr}")
scan_header('Server', headers)
scan_header('Content-Security-Policy', headers)
scan_header('X-Frame-Options', headers)
scan_header('X-XSS-Protection', headers)
print("")
def get_response(web_url, user_agent, **proxy_name):
try:
headers = requests.utils.default_headers()
headers.update({'User-Agent': f'{user_agent}'})
if proxy_name != None:
domain_name = re.findall("//(.*?)/", web_url)[0]
print(f"[{bblue}INFO{noclr}] using {bred}proxy{noclr} {cyan}{proxy_name['http']}{noclr}")
resp = requests.get(web_url,headers=headers, proxies=proxy_name, verify=False, allow_redirects=True)
print(f"[{bgreen}+{noclr}] {bred}IP:{noclr} {socket.gethostbyname(domain_name)}")
print(f"[{bgreen}+{noclr}] {bred}CODE:{noclr} {white}{resp.status_code} {resp.reason}{noclr}")
return resp
else:
domain_name = re.findall("//(.*?)/", web_url)[0]
resp = requests.get(web_url,headers=headers, verify=False, allow_redirects=True)
print(f"[{bgreen}+{noclr}] {bred}IP:{noclr} {socket.gethostbyname(domain_name)}")
print(f"[{bgreen}+{noclr}] {bred}CODE:{noclr} {white}{resp.status_code} {resp.reason}{noclr}")
return resp
except Exception as e:
print(f"[{bred}Error{noclr}] something went wrong !\n")
print(e)
sys.exit(0)
def scan_header(header, header_dict):
try:
if not header in (header_dict.keys()):
print(f"{cyan}{header}:{noclr} {bred}missing{noclr}")
else:
header_value = header_dict[header]
print(f"{cyan}{header}:{noclr} {orng}{header_value}{noclr}")
except KeyboardInterrupt:
print(f"\n[{bred}KeyboardInterrupt{noclr}] Exiting..\n")
parser = optparse.OptionParser("\n./simba [-h or --help] [-f or --file]=<file-path-with-website URLs, one on each line> [-l or --link=URL-of-one-website]")
parser.add_option("-f", "--file", dest="websites_file_path", type='string', help="specify the file containing websites one on each line")
parser.add_option("-l", "--link", dest="website_link", type='string', help="specify a single website link")
parser.add_option("-p", "--proxy", dest="relay_proxy", type='string', help="specify a proxy in following format protocol://<IP>:<port>")
parser.add_option("-u", "--useragent", dest="user_agent", type='string', help="specify a User-Agent Header from options [googlebot,chrome_*win/linux/mac/iphone/android*,firefox_*win/linux/mac/iphone/android*]")
(options, args) = parser.parse_args()
if options.websites_file_path == None and options.website_link == None:
parser.error(f"\n[{bred}Error{noclr}] Insufficent Arguments supplied {cyan}-f/--file{noclr} or {cyan}-l/--link{noclr} missing value\n")
sys.exit(0)
elif options.website_link != None:
website_url = parse_weburl(options.website_link)
proxy_relay = options.relay_proxy
print(f"\n[{bblue}INFO{noclr}] Analyzing {cyan}{website_url}{noclr}")
user_agent_header = uagent_header_parse(options.user_agent)
web_rsp = get_response(website_url,user_agent_header,http=proxy_relay,https=proxy_relay)
header_scan(web_rsp)
elif check_file_existence(options.websites_file_path):
file_path = options.websites_file_path
proxy_relay = options.relay_proxy
user_agent_header = uagent_header_parse(options.user_agent)
print(f"\n[{bblue}INFO{noclr}] {cyan}{file_path}{noclr} file found!\n")
with open(file_path, 'r') as file:
for line in file.readlines():
website_url = parse_weburl(line.strip())
print(f"\n[{bblue}INFO{noclr}] Analyzing {cyan}{website_url}{noclr}")
web_rsp = get_response(website_url,user_agent_header,http=proxy_relay,https=proxy_relay)
header_scan(web_rsp)
else:
print(f"\n[{bred}Error{noclr}] something went wrong, please check your {cyan}file path{noclr}\n")