p0dalirius / apachetomcatscanner Goto Github PK

 apachetomcatscanner -tf results/subdomains.txt 
Apache Tomcat Scanner v3.6 - by @podalirius_

Traceback (most recent call last):
  File "/usr/local/bin/apachetomcatscanner", line 8, in <module>
    sys.exit(main())
             ^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/apachetomcatscanner/__main__.py", line 197, in main
    config = Config()
             ^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/apachetomcatscanner/Config.py", line 34, in __init__
    self.__load_default_credentials()
  File "/usr/local/lib/python3.11/dist-packages/apachetomcatscanner/Config.py", line 43, in __load_default_credentials
    f = open(path_to_creds, 'r')
        ^^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/usr/local/lib/python3.11/dist-packages/apachetomcatscanner/data/credentials.json'

* Installing packages in isolated environment... (wheel)
* Building wheel...
/tmp/build-env-06_0j8il/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:73: _WouldIgnoreField: `scripts` defined outside of `pyproject.toml` would be ignored.
!!

        ********************************************************************************
        ##########################################################################
        # configuration would be ignored/result in error due to `pyproject.toml` #
        ##########################################################################

        The following seems to be defined outside of `pyproject.toml`:

        `scripts = ['apachetomcatscanner=apachetomcatscanner.__main__:main']`

        According to the spec (see the link below), however, setuptools CANNOT
        consider this value unless `scripts` is listed as `dynamic`.

        https://packaging.python.org/en/latest/specifications/declaring-project-metadata/

        For the time being, `setuptools` will still consider the given value (as a
        **transitional** measure), but please note that future releases of setuptools will
        follow strictly the standard.

        To prevent this warning, you can list `scripts` under `dynamic` or alternatively
        remove the `[project]` table from your file and rely entirely on other means of
        configuration.

        By 2023-Oct-30, you need to update your project and remove deprecated calls
        or your builds will no longer be supported.
        ********************************************************************************

!!

root@xxx:/root#  apachetomcatscanner -v -tt localhost -tp 80
Apache Tomcat Scanner v3.5 - by @podalirius_

[!] Cannot start scan: no targets loaded.

root@xxx:/root# head /opt/freeware/bin/apachetomcatscanner
#!/usr/bin/python3
# -*- coding: utf-8 -*-
import re
import sys
from apachetomcatscanner.__main__ import main
if __name__ == '__main__':
    sys.argv[0] = re.sub(r'(-script\.pyw|\.exe)?$', '', sys.argv[0])
    sys.exit(main())

root@xxx:/root# /usr/bin/python3 --version
Python 3.7.15

python3 ApacheTomcatScanner.py \
    -tf ./v  \
    --tomcat-usernames-file ../../wordlist/tomcat-default-username.txt \
    --tomcat-passwords-file ../../wordlist/tomcat-default-password.txt \
    -C  \
    --no-colors \
    --export-json ./aaaa.json \
    --debug

[debug] Error in get_version_from_malformed_http_request('https://campusm.gold.ac.uk/manager/html'): string indices must be integers

python3 -m pip install -r requirements.txt 
Requirement already satisfied: sectools in /usr/local/lib/python3.8/dist-packages (from -r requirements.txt (line 1)) (1.3.4)
Requirement already satisfied: xlsxwriter in /usr/local/lib/python3.8/dist-packages (from -r requirements.txt (line 2)) (3.0.3)
Requirement already satisfied: requests in /home/AMBERJACK/28wjk436e4/.local/lib/python3.8/site-packages (from -r requirements.txt (line 3)) (2.25.1)
Requirement already satisfied: ldap3 in /usr/local/lib/python3.8/dist-packages (from sectools->-r requirements.txt (line 1)) (2.9.1)
Requirement already satisfied: urllib3<1.27,>=1.21.1 in /home/AMBERJACK/28wjk436e4/.local/lib/python3.8/site-packages (from requests->-r requirements.txt (line 3)) (1.26.5)
Requirement already satisfied: certifi>=2017.4.17 in /usr/lib/python3/dist-packages (from requests->-r requirements.txt (line 3)) (2019.11.28)
Requirement already satisfied: idna<3,>=2.5 in /usr/lib/python3/dist-packages (from requests->-r requirements.txt (line 3)) (2.8)
Requirement already satisfied: chardet<5,>=3.0.2 in /usr/lib/python3/dist-packages (from requests->-r requirements.txt (line 3)) (3.0.4)
Requirement already satisfied: pyasn1>=0.4.6 in /usr/local/lib/python3.8/dist-packages (from ldap3->sectools->-r requirements.txt (line 1)) (0.4.8)

apachetomcatscanner
Traceback (most recent call last):
  File "/usr/local/bin/apachetomcatscanner", line 5, in <module>
    from apachetomcatscanner.__main__ import main
  File "/usr/local/lib/python3.8/dist-packages/apachetomcatscanner/__main__.py", line 15, in <module>
    from sectools.windows.ldap import get_computers_from_domain, get_servers_from_domain
ImportError: cannot import name 'get_servers_from_domain' from 'sectools.windows.ldap' (/usr/local/lib/python3.8/dist-packages/sectools/windows/ldap.py)

cat /usr/local/lib/python3.8/dist-packages/sectools/windows/ldap.py | rg get
def __init_ldap_connection(target, tls_version, dc_ip, domain, username, password, lmhash, nthash, use_ldaps=False, auth_key=None):
    ldap_server = ldap3.Server(target, get_info=ldap3.ALL, port=port, use_ssl=use_ssl, tls=tls)
    target_dc = (auth_dc_ip if auth_dc_ip is not None else auth_domain)
                target=target_dc,
                target=target_dc,
            target=target_dc,
def get_computers_from_domain(auth_domain, auth_dc_ip, auth_username, auth_password, auth_hashes):
    target_dn = ldap_server.info.other["defaultNamingContext"]
    results = list(ldap_session.extend.standard.paged_search(target_dn, "(objectCategory=computer)", attributes=["dNSHostName"]))
``
I think get_servers_from_domain function is missing from the latest release.

Please let me know if i am doing anything wrong or its a real bug, /Issue.

Once again thanks a lot for releasing such a nice tool.
$3curityb3ast

apachetomcatscanner -tt xxx.xx.xx.xx -tp 443 -v
Apache Tomcat Scanner v2.3.1 - by @podalirius_

[debug] Loading targets from --target options
[+] Targeting 1 ports on 1 targets
[+] Searching for Apache Tomcats servers on specified targets ...
[+] All done!

curl -iks https://165.197.218.124 | head -n 20
HTTP/1.1 200 
Date: Wed, 03 Aug 2022 09:45:11 GMT
Server: Apache
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Connection: close
Transfer-Encoding: chunked

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="UTF-8" />
        <title>Apache Tomcat/8.5.13</title>
        <link href="favicon.ico" rel="icon" type="image/x-icon" />

┌──(root㉿d3m0n)-[/home/d3m0n/ApacheTomcatScanner]
└─# python3 ApacheTomcatScanner.py
Traceback (most recent call last):
  File "/home/d3m0n/ApacheTomcatScanner/ApacheTomcatScanner.py", line 8, in <module>
    from apachetomcatscanner.__main__ import main
  File "/home/d3m0n/ApacheTomcatScanner/apachetomcatscanner/__main__.py", line 14, in <module>
    from apachetomcatscanner.utils.scan import scan_worker
  File "/home/d3m0n/ApacheTomcatScanner/apachetomcatscanner/utils/scan.py", line 9, in <module>
    import requests
  File "/usr/local/lib/python3.10/dist-packages/requests/__init__.py", line 43, in <module>
    import urllib3
  File "/usr/local/lib/python3.10/dist-packages/urllib3/__init__.py", line 8, in <module>
    from .connectionpool import (
  File "/usr/local/lib/python3.10/dist-packages/urllib3/connectionpool.py", line 29, in <module>
    from .connection import (
  File "/usr/local/lib/python3.10/dist-packages/urllib3/connection.py", line 39, in <module>
    from .util.ssl_ import (
  File "/usr/local/lib/python3.10/dist-packages/urllib3/util/__init__.py", line 3, in <module>
    from .connection import is_connection_dropped
  File "/usr/local/lib/python3.10/dist-packages/urllib3/util/connection.py", line 3, in <module>
    from .wait import wait_for_read
  File "/usr/local/lib/python3.10/dist-packages/urllib3/util/wait.py", line 1, in <module>
    from .selectors import (
  File "/usr/local/lib/python3.10/dist-packages/urllib3/util/selectors.py", line 14, in <module>
    from collections import namedtuple, Mapping
ImportError: cannot import name 'Mapping' from 'collections' (/usr/lib/python3.10/collections/__init__.py)

┌──(root㉿d3m0n)-[/home/d3m0n/ApacheTomcatScanner]
└─# python3.9 ApacheTomcatScanner.py
Traceback (most recent call last):
  File "/home/d3m0n/ApacheTomcatScanner/ApacheTomcatScanner.py", line 8, in <module>
    from apachetomcatscanner.__main__ import main
  File "/home/d3m0n/ApacheTomcatScanner/apachetomcatscanner/__main__.py", line 11, in <module>
    from apachetomcatscanner.Reporter import Reporter
  File "/home/d3m0n/ApacheTomcatScanner/apachetomcatscanner/Reporter.py", line 10, in <module>
    import xlsxwriter
ModuleNotFoundError: No module named 'xlsxwriter'