diff options
| author | bitform <matt@exploit-monday.com> | 2012-08-07 19:14:11 -0400 |
|---|---|---|
| committer | bitform <matt@exploit-monday.com> | 2012-08-07 19:14:11 -0400 |
| commit | 0ecd7cb158a12ec77d202da8a7392891d7d1707a (patch) | |
| tree | 5278954a7844da4e3992d55fc03d732fd143ed63 /Recon/Get-HttpStatus.ps1 | |
| parent | befc24a6e89ce6ff7d5007e27ba5ad4f1e5029a9 (diff) | |
| download | PowerSploit-0ecd7cb158a12ec77d202da8a7392891d7d1707a.tar.gz PowerSploit-0ecd7cb158a12ec77d202da8a7392891d7d1707a.zip | |
Added Get-HttpStatus and 'Recon' directory
* All recon scripts not live in the 'Recon' directory
* Added Get-HttpStatus - An http[s] enumeration tool
* Added default dictionary for Get-HttpStatus - .\Dictionaries\admin.txt
* Moved Invoke-ReverseDnsLookup to 'Recon'
Diffstat (limited to 'Recon/Get-HttpStatus.ps1')
| -rw-r--r-- | Recon/Get-HttpStatus.ps1 | 119 |
1 files changed, 119 insertions, 0 deletions
diff --git a/Recon/Get-HttpStatus.ps1 b/Recon/Get-HttpStatus.ps1 new file mode 100644 index 0000000..2f4b343 --- /dev/null +++ b/Recon/Get-HttpStatus.ps1 @@ -0,0 +1,119 @@ +function Get-HttpStatus {
+<#
+.SYNOPSIS
+PowerSploit Module - Get-HttpStatus
+
+Returns the HTTP Status Codes and full URL for specified paths.
+
+Author: Chris Campbell (@obscuresec)
+License: BSD 3-Clause
+
+.DESCRIPTION
+A script to check for the existence of a path or file on a webserver.
+
+.PARAMETER Target
+Specifies the remote web host either by IP or hostname.
+
+.PARAMETER Path
+Specifies the remost host.
+
+.PARAMETER Port
+Specifies the port to connect to.
+
+.PARAMETER UseSSL
+Use an SSL connection.
+
+.EXAMPLE
+PS > Get-HttpStatus -Target www.example.com -Path c:\dictionary.txt | Select-Object {where StatusCode -eq 20*}
+
+.EXAMPLE
+PS > Get-HttpStatus -Target www.example.com -Path c:\dictionary.txt -UseSSL
+
+.NOTES
+HTTP Codes: 100 - Informational * 200 - Success * 300 - Redirection * 400 - Client Error * 500 - Server Error
+Status Codes: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
+
+.LINK
+http://obscuresecurity.blogspot.com
+#>
+
+ [CmdletBinding()] Param(
+ [Parameter(Mandatory = $True)] [String] $Target,
+ [Parameter()] [String] [ValidateNotNullOrEmpty()] $Path = '.\Dictionaries\admin.txt',
+ [Parameter()] [Int] $Port,
+ [Parameter()] [Switch] $UseSSL
+ )
+
+ if (Test-Path $Path) {
+
+ if ($UseSSL -and $Port -eq 0) {
+ # Default to 443 if SSL is specified but no port is specified
+ $Port = 443
+ } elseif ($Port -eq 0) {
+ # Default to port 80 if no port is specified
+ $Port = 80
+ }
+
+ $TcpConnection = New-Object System.Net.Sockets.TcpClient
+ Write-Verbose "Path Test Succeeded - Testing Connectivity"
+
+ try {
+ # Validate that the host is listening before scanning
+ $TcpConnection.Connect($Target, $Port)
+ } catch {
+ Write-Error "Connection Test Failed - Check Target"
+ $Tcpconnection.Close()
+ Return
+ }
+
+ $Tcpconnection.Close()
+ } else {
+ Write-Error "Path Test Failed - Check Dictionary Path"
+ Return
+ }
+
+ if ($UseSSL) {
+ $SSL = 's'
+ # Ignore invalid SSL certificates
+ [System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $True }
+ } else {
+ $SSL = ''
+ }
+
+ if (($Port -eq 80) -or ($Port -eq 443)) {
+ $PortNum = ''
+ } else {
+ $PortNum = ":$Port"
+ }
+
+ # Check Http status for each entry in the doctionary file
+ foreach ($Item in Get-Content $Path) {
+
+ $WebTarget = "http$($SSL)://$($Target)$($PortNum)/$($Item)"
+ $URI = New-Object Uri($WebTarget)
+
+ try {
+ $WebRequest = [System.Net.WebRequest]::Create($URI)
+ $WebResponse = $WebRequest.GetResponse()
+ $WebStatus = $WebResponse.StatusCode
+ $ResultObject += $ScanObject
+ $WebResponse.Close()
+ } catch {
+ $WebStatus = $Error[0].Exception.InnerException.Response.StatusCode
+
+ if ($WebStatus -eq $null) {
+ # Not every exception returns a StatusCode.
+ # If that is the case, return the Status.
+ $WebStatus = $Error[0].Exception.InnerException.Status
+ }
+ }
+
+ $Result = @{ Status = $WebStatus;
+ URL = $WebTarget}
+
+ $ScanObject = New-Object -TypeName PSObject -Property $Result
+
+ Write-Output $ScanObject
+
+ }
+}
\ No newline at end of file |