code_leak.py

import re
import os
import sys

exp10it_module_path = os.path.expanduser("~") + "/exp10it"
sys.path.insert(0, exp10it_module_path)

from exp10it import get_request
from exp10it import get_http_domain_from_url

target=sys.argv[1]
print("checking code leak vul for "+target)
current_dir = os.path.split(os.path.realpath(__file__))[0]
return_string = ""
leak_list = [".hg", ".git", ".svn", ".ds_store", ".bzr",
            "WEB-INF/database.propertiesl", "WEB-INF/web.xml"]
for each in leak_list:
    http_domain = get_http_domain_from_url(target)
    leaked_url = http_domain + "/" + each
    a = get_request(leaked_url)
    if not re.search(r"页面不存在", a['content'], re.I) and a['code'] == 200:
        return_string += "%s exists!\n" % leaked_url
if return_string != "":
    return_string += "visit http://www.hacksec.cn/Penetration-test/474.html to exploit it"
    with open("%s/result.txt" % current_dir, "a+") as f:
        f.write(return_string)