""" error_pages.py Copyright 2006 Andres Riancho This file is part of w3af, http://w3af.org/ . w3af is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License. w3af is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with w3af; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA """ import w3af.core.data.kb.knowledge_base as kb from w3af.core.data.db.disk_list import DiskList from w3af.core.data.quick_match.multi_in import MultiIn from w3af.core.data.quick_match.multi_re import MultiRE from w3af.core.data.kb.info import Info from w3af.core.controllers.plugins.grep_plugin import GrepPlugin class error_pages(GrepPlugin): """ Grep every page for error pages. :author: Andres Riancho (andres.riancho@gmail.com) """ ERROR_PAGES = ( '

Error page exception

', # This signature fires up also in default 404 pages of aspx which # generates a lot of noise, so ... disabling it # '

Server Error in ', '

Runtime Error

', '

Access is denied

', '

Original Exception:

', 'Server object error', 'invalid literal for int()', 'exceptions.ValueError', 'Type mismatch: ', '[an error occurred while processing this directive]', 'Error Occurred While Processing Request' '

Error Occurred While Processing Request

', # VBScript '

Microsoft VBScript runtime ', "error '800a000d'", # nwwcgi errors 'nwwcgi Error', # ASP error I found during a pentest, the ASP used a foxpro db, not a # SQL injection 'error \'800a0005\'', '<h2> Runtime Error </h2>', # Some error in ASP when using COM objects. 'Operation is not allowed when the object is closed.', # An error when ASP tries to include something and it fails 'Active Server Pages error \'ASP 0126\'', # ASPX ' Description: An unhandled exception occurred during the execution of the' ' current web request', # Struts '] does not contain handler parameter named', # PHP 'Warning: ', 'No row with the given identifier', 'open_basedir restriction in effect', "eval()'d code on line ", "Cannot execute a blank command in", "Fatal error: preg_replace", "thrown in ", "#0 {main}", "Stack trace:", " on line ", # python "PythonHandler django.core.handlers.modpython", "t = loader.get_template(template_name) # You need to create a 404.html template.", '<h2>Traceback (innermost last)</h2>', # Java '[java.lang.', 'class java.lang.', 'java.lang.NullPointerException', 'java.rmi.ServerException', 'at java.lang.', 'onclick="toggle(\'full exception chain stacktrace\')"', 'at org.apache.catalina', 'at org.apache.coyote.', 'at org.apache.tomcat.', 'at org.apache.jasper.', # https://github.com/andresriancho/w3af/issues/4001 '<html><head><title>Application Exception', # ruby '

Ruby on Rails application could not be started

', # Coldfusion 'Error Occurred While Processing Request

', 'Error Occurred While Processing Request

', '

Error Diagnostic Information

', '

Search the Knowledge Base to find a solution to your problem.

', # http://www.programacion.net/asp/articulo/kbr_execute/ 'Server.Execute Error', # IIS '

HTTP 403.6 - Forbidden: IP address rejected
', '500 Internal Server Error', ) _multi_in = MultiIn(ERROR_PAGES) VERSION_REGEX = ( ('
(.*?)
', 'Apache'), ('

(.*?)

', 'Apache Tomcat'), ('

Error page exception

Server Error in ', '

Runtime Error

Access is denied

Original Exception:

Error Occurred While Processing Request

Ruby on Rails application could not be started

', '

Error Diagnostic Information

HTTP 403.6 - Forbidden: IP address rejected', '500 Internal Server Error', ) _multi_in = MultiIn(ERROR_PAGES) VERSION_REGEX = ( ('(.*?)', 'Apache'), ('

(.*?)

HTTP 403.6 - Forbidden: IP address rejected
', '500 Internal Server Error', ) _multi_in = MultiIn(ERROR_PAGES) VERSION_REGEX = ( ('
(.*?)
', 'Apache'), ('

Query Builder