numanturle

# Title: gSOAP 2.8 - Directory Traversal
# Author: Numan Türle
# Date: 2019-11-13
# Vendor Homepage: https://www.genivia.com/
# Version : gSOAP 2.8
# Software Link : https://www.genivia.com/products.html#gsoap


POC
---------

numanturle

id: waf-bypass-numi

info:
  name: waf-bypass-numi
  author: numanture

requests:
  - raw:
      - |
        GET /blabla HTTP/1.1

numanturle

from solcx import compile_source
from web3 import Web3

setup_txt = open("Setup.sol", "r").read()
setup_compiled_source = compile_source(setup_txt, output_values=['abi'])
setup_abi = list(setup_compiled_source.items())[0][1]['abi']

random_txt = open("Random.sol", "r").read()
random_compiled_source = compile_source(random_txt, output_values=['abi'])
random_abi = list(random_compiled_source.items())[0][1]['abi']

numanturle

Base-Url: 127.0.0.1
Client-IP: 127.0.0.1
Http-Url: 127.0.0.1
Proxy-Host: 127.0.0.1
Proxy-Url: 127.0.0.1
Real-Ip: 127.0.0.1
Redirect: 127.0.0.1
Referer: 127.0.0.1
Referrer: 127.0.0.1
Refferer: 127.0.0.1

numanturle

<?php
$ac = file("kapsam.txt");
foreach($ac as $x){
    $x = trim($x);
    $x = str_replace(["https://","http://","www.","/"],"",$x);
    $sdip = gethostbynamel($x);
    if(isset($sdip[0])){
        echo $sdip[0].PHP_EOL;
    }else {
        echo "IP COZUMLENMEDI".PHP_EOL;

numanturle

<%@ Page Language="C#" EnableViewState="false" %>
<%@ Import Namespace="System.Web.UI.WebControls" %>
<%@ Import Namespace="System.Diagnostics" %>
<%@ Import Namespace="System.IO" %>

<%
	string outstr = "";
	string dir = Page.MapPath(".") + "/";
	if (Request.QueryString["fdir"] != null)
		dir = Request.QueryString["fdir"] + "/";

numanturle

$db_name = "MalwareURLs.txt"
if (!(Test-Path $db_name))
{
   New-Item -name $db_name -type "file" -value 
   Write-Output "Created new file and text content added"
}

$url_list = @(

numanturle

#!/usr/bin/python


import sys
import argparse
import xml.etree.ElementTree as ET

def main(argv):
	inputfile = ''
	outputfile = ''

numanturle

<?php 
$ac = file(trim($argv[1]));

$start = 0;
$sonuc = [];
$son_ip = "";
foreach($ac as $satir){

    if(strstr($satir, "Nmap scan report for")){
        $start = 1;

numanturle

#!/usr/bin/python


import sys
import argparse
import xml.etree.ElementTree as ET

def main(argv):
	inputfile = ''
	outputfile = ''