10 | 
11 |
39 | 
40 |
42 | OWASP VBScan 0.1.7 introduction (Youtube) 43 | 44 | [](https://www.youtube.com/watch?v=SirozqDYERA) 45 | 46 | OWASP VBScan Teaser (Youtube) 47 | 48 | [](https://www.youtube.com/watch?v=NGEtJoGL2yA) 49 | -------------------------------------------------------------------------------- /core/compare.pl: -------------------------------------------------------------------------------- 1 | sub max { 2 | my $x = shift; 3 | my $y = shift; 4 | return ( $x > $y ? $x : $y ); 5 | } 6 | 7 | sub version_compare { 8 | my $ver1 = shift || 0; 9 | my $ver2 = shift || 0; 10 | my @v1 = split /[.+:~-]/, $ver1; 11 | my @v2 = split /[.+:~-]/, $ver2; 12 | 13 | for ( my $i = 0 ; $i < max( scalar(@v1), scalar(@v2) ) ; $i++ ) { 14 | 15 | # Add missing version parts if one string is shorter than the other 16 | # i.e. 0 should be lt 0.2.1 and not equal, so we append .0 17 | # -> 0.0.0 <=> 0.2.1 -> -1 18 | push( @v1, 0 ) unless defined( $v1[$i] ); 19 | push( @v2, 0 ) unless defined( $v2[$i] ); 20 | if ( int( $v1[$i] ) > int( $v2[$i] ) ) { 21 | return 1; 22 | } 23 | elsif ( int( $v1[$i] ) < int( $v2[$i] ) ) { 24 | return -1; 25 | } 26 | } 27 | return 0; 28 | } 29 | -------------------------------------------------------------------------------- /core/header.pl: -------------------------------------------------------------------------------- 1 | #!/usr/bin/perl 2 | 3 | use Term::ANSIColor; 4 | 5 | print color("YELLOW"); 6 | print q{ 7 | _ _ ____ ___ ___ __ _ _ 8 | ( \/ )( _ \/ __) / __) /__\ ( \( ) 9 | \ / ) _ <\__ \( (__ /(__)\ ) ( 10 | \/ (____/(___/ \___)(__)(__)(_)\_) 11 | }; 12 | print color("red") . "\t\t(1337.today)" . color("reset"); 13 | print " 14 | 15 | --=[". color("BLUE") . "OWASP VBScan". color("reset") ." 16 | +---++---==[Version : " 17 | . color("red"). "$version\n". color("reset") . " +---++---==[Update Date : [". color("red") . "$update". color("reset") . "] 18 | +---++---==[Author : ". color("red") . "Mohammad Reza Espargham". color("reset")." 19 | +---++---==[Website : ". color("red") . "www.reza.es". color("reset")." 20 | --=[Code name : ". color("red") . "$codename". color("reset")."\n \@OWASP_VBScan , \@rezesp , \@OWASP\n\n"; 21 | 22 | if(!defined $ARGV[0]){ 23 | 24 | print color("cyan"); 25 | printf "\n Usage: \n \t$0
[+] $title
30 | 31 |$datail
32 | 33 |
8 |
9 |
17 |
23 |
--------------------------------------------------------------------------------
/core/upgrade.pl:
--------------------------------------------------------------------------------
1 | #!/usr/bin/perl
2 |
3 | #Coded By Mohammad Reza Espargham
4 | #OWASP VBScan
5 |
6 | print "\n[+] Updating ...\n";
7 | $x=`pwd`;
8 | chomp($x);
9 | `cd /tmp;git clone https://github.com/rezasp/vbscan.git`;
10 | `cp -R /tmp/vbscan/ \"$x\"`;
11 | `rm -rf /tmp/vbscan/`;
12 |
13 |
14 | print "[+] Update was completed successfully\n";
--------------------------------------------------------------------------------
/core/ver.pl:
--------------------------------------------------------------------------------
1 | #start Version finder
2 | @pa = ("$target/clientscript/vbulletin_global.js","$target/clientscript/vbulletin-core.js","$target/clientscript/vbulletin_menu.js","$target/");
3 |
4 | foreach $lin(@pa){
5 | $source=$ua->get($lin)->decoded_content;
6 | if (($source =~ m/vbulletin/i || $source =~ m/Vbulletin/i || $source =~ m/vBulletin/i))
7 | {goto len;}
8 | }
9 | print color("red");
10 | print "[++] The target is alive! But is not running on vbulletin.\nDo you want to continue? [y/N] ";
11 | $inp=
10 | URL : $target
11 | Vbulletin Version : $vbversion
12 | 13 | Start Time : $stime
14 | Finish Time : $ftime
15 |
16 | 11 | Vbulletin Version : $vbversion
12 | 13 | Start Time : $stime
14 | Finish Time : $ftime
15 |
| Vulnerability | 19 |
|---|
Generated on 13/9/2016 20:57:4 Tuesday by OWASP VBScan $version (Code Name: $codename)