-
-
Notifications
You must be signed in to change notification settings - Fork 88
/
shellshock.js
72 lines (65 loc) · 3.14 KB
/
shellshock.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
$(function() {
$.ajaxSetup({
async: true
});
$("#loading_tester").fadeOut();
$("#shock_tester").fadeIn();
var shocking = false;
get_stats();
function get_stats() {
var jqxhr = $.getJSON("/stats", function(data) {
$("#test_stats").html("<strong>" + data.total + "</strong> Total tests to date. <strong>" + data.total_vulnerable + "</strong> Total vulnerable hosts found.");
})
.fail(function() {
$("#test_stats").html('Error loading stats... Connection issue?');
});
}
$("#btn_shock").click(function() {
if (!shocking) {
shocking = true;
$("#btn_shock").html('Shocking... <i class="fa fa-spinner fa-spin"></i>');
help_complete_url(); // Auto-correct shema-less URL's for ease of use
var shock_url = $("#test_url").val();
if (shock_url.length <= 7) {
$("#test_errors").html('<div class="alert alert-danger" role="alert"><strong>Invalid URL</strong> Please enter a valid url to test and try again.</div>');
$("#btn_shock").html("Shock!");
shocking = false;
} else {
var jqxhr = $.getJSON("/shock?url=" + shock_url, function(data) {
if (data.status == 1) {
$("#test_errors").html('<div class="alert alert-success" role="alert"><strong>Vulnerable!</strong> ' + data.message + '</div>');
}
if (data.status == 0) {
$("#test_errors").html('<div class="alert alert-warning" role="alert"><strong>Warning</strong> ' + data.message + '</div>');
}
if (data.status == 2) {
$("#test_errors").html('<div class="alert alert-info" role="alert"><strong>hmm...</strong> ' + data.message + '</div>');
}
if (data.status == 3) {
$("#test_errors").html('<div class="alert alert-info" role="alert"><strong>Error!</strong> ' + data.message + '</div>');
}
$("#btn_shock").html("Shock!");
shocking = false;
})
.fail(function() {
$("#test_errors").html('<div class="alert alert-danger" role="alert"><strong>Error!</strong> Something bad happened, but it wasn\'t the vulnerability. Try again later..?</div>');
$("#btn_shock").html("Shock!");
shocking = false;
});
}
} else {
console.log('Already shocking!');
}
})
})
// If user doesn't specify a schema, suppose it's 'http'
// and autocorrect the entry
function help_complete_url() {
var shock_url = $("#test_url").val();
var url_components = shock_url.split(":");
if(url_components[0].length == shock_url.length) {
//For now suppose if no schema specified, they wanted 'http'
new_shock_url = 'http://'+shock_url;
$("#test_url").val(new_shock_url);
}
}