e-m-b-a/emba
1
0
Fork 0
mirror of https://github.com/e-m-b-a/emba.git synced 2026-10-11 22:09:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

ensure positive web results are detected

Browse Source
This commit is contained in:
Michael Messner
2026-09-02 12:13:01 +02:00
parent 8ff0e7c7ae
commit 9d7298ca57
3 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helpers/firmware_map_builder.sh
+1 -1
View File
@@ -77,7 +77,7 @@ parameter_parsing() {
export HTML_PATH="${LOG_DIR}/html-report"
export S115_LOG="${LOG_DIR}/s115_usermode_emulator.txt"
export S115_LOG_DIR="${S115_LOG/\.txt/\/}"
export L10_CSV_LOG="${LOG_DIR}/csv_logs/l10_system_emulator.csv"
export L10_CSV_LOG="${LOG_DIR}/csv_logs/l10_system_emulation.csv"
export SVG_FILE="${LOG_PATH_MODULE}/EMBA-dependency-map.svg"
}
installer/IL15_emulated_checks_init.sh
+5
View File
@@ -72,6 +72,11 @@ IL15_emulated_checks_init() {
print_tool_info "libasound2t64"
print_tool_info "npm"
# nikto
print_tool_info "libjson-perl"
print_tool_info "libxml-writer-perl"
print_tool_info "libnet-ssleay-perl"
if [[ "${LIST_DEP}" -eq 1 ]] || [[ "${DOCKER_SETUP}" -eq 1 ]]; then
ANSWER=("n")
else
modules/L25_web_checks.sh
+5
View File
@@ -240,6 +240,7 @@ check_for_basic_auth_init() {
if [[ "${lCURL_RET}" != 22 ]] && [[ "${lCREDS}" != "NA" ]]; then
print_output "[+] Basic auth credentials for web server found: ${ORANGE}${lCREDS}${NC}"
CURL_CREDS_ARR=("--user" "${lCREDS}")
WEB_RESULTS=1
fi
else
print_output "[*] No basic auth found in Nmap logs"
@@ -527,9 +528,11 @@ web_access_crawler() {
if [[ "${lCRAWL_RESP_200}" -gt 0 ]]; then
print_output "[+] Found ${ORANGE}${lCRAWL_RESP_200}${GREEN} unique valid responses - please check the log for further details" "" "${LOG_PATH_MODULE}/crawling_${lIP_}-${lPORT_}.log"
WEB_RESULTS=1
fi
if [[ "${lCRAWL_RESP_401}" -gt 0 ]]; then
print_output "[+] Found ${ORANGE}${lCRAWL_RESP_401}${GREEN} unique unauthorized responses - please check the log for further details" "" "${LOG_PATH_MODULE}/crawling_${lIP_}-${lPORT_}.log"
WEB_RESULTS=1
fi
if [[ -f "${LOG_PATH_MODULE}/crawling_${lIP_}-${lPORT_}-200ok.log" ]] && [[ -f "${LOG_DIR}"/s22_php_check/semgrep_php_results_xml.log ]]; then
@@ -545,6 +548,7 @@ web_access_crawler() {
write_csv_log "vuln file crawled" "source of vuln" "language" "vuln name" "filesystem path with vuln"
fi
print_output "[+] Found possible vulnerability ${ORANGE}${lVULN_NAME}${GREEN} in semgrep analysis for ${ORANGE}${lWEB_NAME}${NC}."
WEB_RESULTS=1
write_link "s22"
write_csv_log "${lWEB_NAME}" "semgrep" "php" "${lVULN_NAME}" "${lVULN_FILE}"
done
@@ -563,6 +567,7 @@ web_access_crawler() {
write_csv_log "vuln file crawled" "source of vuln" "language" "vuln name" "filesystem path with vuln"
fi
print_output "[+] Found possible vulnerability in lua analysis for ${ORANGE}${lWEB_NAME}${NC}." "${S23_LOG}"
WEB_RESULTS=1
write_csv_log "${lWEB_NAME}" "lua check" "lua" "${lVULN_NAME}" "${lWEB_PATH}"
done
done <"${LOG_PATH_MODULE}/crawling_${lIP_}-${lPORT_}-200ok.log"