{"id":88992,"date":"2020-07-17T07:42:02","date_gmt":"2020-07-17T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami"},"modified":"2020-07-17T07:42:02","modified_gmt":"2020-07-17T05:42:02","slug":"wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","title":{"rendered":"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/c52b58a326ba424d73a93614818c82f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nV minulosti <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/news\/t\/507776\/\">\u010dl\u00e1nku<\/a><\/noindex> jsme hovo\u0159ili o <strong>Nemesida WAF Free<\/strong> \u2014 bezplatn\u00e9m n\u00e1stroji pro ochranu web\u016f a API p\u0159ed hackersk\u00fdmi \u00fatoky, a v tomto \u010dl\u00e1nku se zam\u011b\u0159\u00edme na p\u0159ehled popul\u00e1rn\u00edho skeneru zranitelnost\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">Wapiti<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Skenov\u00e1n\u00ed webov\u00e9 str\u00e1nky na zranitelnosti je nezbytn\u00e9 opat\u0159en\u00ed, kter\u00e9 spolu s anal\u00fdzou zdrojov\u00e9ho k\u00f3du umo\u017e\u0148uje posoudit \u00farove\u0148 jej\u00ed ochrany p\u0159ed hrozbami kompromitace. Skenerov\u00e1n\u00ed webov\u00e9ho zdroje lze prov\u00e9st pomoc\u00ed specializovan\u00fdch n\u00e1stroj\u016f.<\/p>\n<p><\/p>\n<p>Nikto, W3af (napsan\u00fd v Pythonu 2.7, kter\u00fd ji\u017e nen\u00ed podporov\u00e1n) nebo Arachni (od \u00fanora v\u00edce nen\u00ed podporov\u00e1n) \u2014 to jsou nejpopul\u00e1rn\u011bj\u0161\u00ed \u0159e\u0161en\u00ed nab\u00edzen\u00e1 v bezplatn\u00e9m segmentu. Samoz\u0159ejm\u011b existuj\u00ed i dal\u0161\u00ed, nap\u0159\u00edklad Wapiti, na kter\u00e9m se rozhodujeme zam\u011b\u0159it.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3 id=\"wapiti-rabotaet-so-sleduyuschimi-tipami-uyazvimostey\">Wapiti pracuje s n\u00e1sleduj\u00edc\u00edmi typy zranitelnost\u00ed:<\/h3>\n<p><\/p>\n<ul>\n<li>odhalen\u00ed souboru (lok\u00e1ln\u00ed a vzd\u00e1len\u00e9, fopen, readfile);<\/li>\n<li>injekce (PHP \/ JSP \/ ASP \/ SQL injekce a XPath injekce);<\/li>\n<li>XSS (meziwebov\u00e9 skriptov\u00e1n\u00ed) (odr\u00e1\u017een\u00e9 a trval\u00e9);<\/li>\n<li>odhalen\u00ed a prov\u00e1d\u011bn\u00ed p\u0159\u00edkaz\u016f (eval (), system (), passtru ());<\/li>\n<li>CRLF injekce (odd\u011bluje HTTP odpov\u011bdi, uchov\u00e1v\u00e1n\u00ed relace);<\/li>\n<li>XXE (vkl\u00e1d\u00e1n\u00ed extern\u00ed XML entity);<\/li>\n<li>SSRF (falsifikace \u017e\u00e1dosti na stran\u011b serveru);<\/li>\n<li>vyu\u017eit\u00ed zn\u00e1m\u00fdch potenci\u00e1ln\u011b nebezpe\u010dn\u00fdch soubor\u016f (d\u00edky datab\u00e1zi Nikto);<\/li>\n<li>slab\u00e9 konfigurace .htaccess, kter\u00e9 lze obej\u00edt;<\/li>\n<li>p\u0159\u00edtomnost z\u00e1lo\u017en\u00edch soubor\u016f odhaluj\u00edc\u00edch d\u016fv\u011brn\u00e9 informace (odhalen\u00ed zdrojov\u00e9ho k\u00f3du);<\/li>\n<li>Shellshock;<\/li>\n<li>otev\u0159en\u00e9 p\u0159esm\u011brov\u00e1n\u00ed;<\/li>\n<li>nestandardn\u00ed HTTP metody, kter\u00e9 mohou b\u00fdt povoleny (PUT).<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"vozmozhnosti\">Mo\u017enosti:<\/h4>\n<p><\/p>\n<ul>\n<li>podpora proxy HTTP, HTTPS a SOCKS5;<\/li>\n<li>autentizace prost\u0159ednictv\u00edm v\u00edce metod: Basic, Digest, Kerberos nebo NTLM;<\/li>\n<li>mo\u017enost omezit oblast skenov\u00e1n\u00ed (dom\u00e9na, slo\u017eka, str\u00e1nka, URL);<\/li>\n<li>automatick\u00e9 odstran\u011bn\u00ed jednoho z parametr\u016f v URL;<\/li>\n<li>v\u00edcen\u00e1sobn\u00e1 opat\u0159en\u00ed proti nekone\u010dn\u00fdm cykl\u016fm skenov\u00e1n\u00ed (p\u0159\u00edklad: ifor, omezen\u00ed hodnot pro parametr);<\/li>\n<li>mo\u017enost nastaven\u00ed priority pro prozkoum\u00e1n\u00ed URL (i kdy\u017e nejsou v oblasti skenov\u00e1n\u00ed);<\/li>\n<li>mo\u017enost vylou\u010dit n\u011bkter\u00e9 URL z skenov\u00e1n\u00ed a \u00fatok\u016f (nap\u0159\u00edklad: URL odhl\u00e1\u0161en\u00ed);<\/li>\n<li>import soubor\u016f cookie (z\u00edsk\u00e1n\u00ed pomoc\u00ed n\u00e1stroje wapiti-getcookie);<\/li>\n<li>mo\u017enost aktivovat \/ deaktivovat kontrolu SSL certifik\u00e1t\u016f;<\/li>\n<li>mo\u017enost extrakce URL z JavaScriptu (velmi jednoduch\u00fd JS interpret);<\/li>\n<li>interakce s HTML5;<\/li>\n<li>n\u011bkolik mo\u017enost\u00ed spr\u00e1vy chov\u00e1n\u00ed a omezen\u00ed crawleru;<\/li>\n<li>nastaven\u00ed maxim\u00e1ln\u00ed doby skenov\u00e1n\u00ed;<\/li>\n<li>p\u0159id\u00e1n\u00ed n\u011bkter\u00fdch p\u0159izp\u016fsobiteln\u00fdch HTTP hlavi\u010dek nebo \u00faprava u\u017eivatelsk\u00e9ho agentu.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"dopolnitelnye-vozmozhnosti\">Dal\u0161\u00ed mo\u017enosti:<\/h4>\n<p><\/p>\n<ul>\n<li>vytv\u00e1\u0159en\u00ed zpr\u00e1v o zranitelnostech v r\u016fzn\u00fdch form\u00e1tech (HTML, XML, JSON, TXT);<\/li>\n<li>pozastaven\u00ed a obnovov\u00e1n\u00ed skenov\u00e1n\u00ed nebo \u00fatoku (mechanismus relace s vyu\u017eit\u00edm SQLite3 datab\u00e1z\u00ed);<\/li>\n<li>zv\u00fdrazn\u011bn\u00ed v termin\u00e1lu pro ozna\u010den\u00ed zranitelnosti;<\/li>\n<li>r\u016fzn\u00e9 \u00farovn\u011b protokolov\u00e1n\u00ed;<\/li>\n<li>rychl\u00fd a snadn\u00fd zp\u016fsob aktivace \/ deaktivace \u00fatokov\u00fdch modul\u016f.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"ustanovka\">Instalace<\/h3>\n<p><\/p>\n<p>Aktu\u00e1ln\u00ed verzi Wapiti lze nainstalovat dv\u011bma zp\u016fsoby:<\/p>\n<p><\/p>\n<ul>\n<li>st\u00e1hnout zdrojov\u00fd k\u00f3d z ofici\u00e1ln\u00edho <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">webu<\/a><\/noindex> a spustit instala\u010dn\u00ed skript, pot\u00e9 co nainstalujete Python3;<\/li>\n<li>pomoc\u00ed p\u0159\u00edkazu pip3 install wapiti3.<\/li>\n<\/ul>\n<p><\/p>\n<p>Po tom bude Wapiti p\u0159ipraven k pr\u00e1ci.<\/p>\n<p><\/p>\n<h3 id=\"rabota-s-instrumentom\">Pr\u00e1ce s n\u00e1strojem<\/h3>\n<p><\/p>\n<p>Pro demonstraci pr\u00e1ce Wapiti budeme pou\u017e\u00edvat speci\u00e1ln\u011b p\u0159ipravenou platformu sites.vulns.pentestit.ru (intern\u00ed zdroj), kter\u00e1 obsahuje r\u016fzn\u00e9 zranitelnosti (Injection, XSS, LFI\/RFI) a dal\u0161\u00ed nedostatky webov\u00fdch aplikac\u00ed. <\/p>\n<p><\/p>\n<p><strong>Informace jsou poskytov\u00e1ny pouze k informa\u010dn\u00edm \u00fa\u010del\u016fm. Nerespektujte z\u00e1kony!<\/strong><\/p>\n<p><\/p>\n<p>Z\u00e1kladn\u00ed p\u0159\u00edkaz pro spu\u0161t\u011bn\u00ed skeneru:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u &lt;target&gt; &lt;options&gt;<\/code><\/pre>\n<p><\/p>\n<p>P\u0159itom je k dispozici pom\u011brn\u011b podrobn\u00e1 n\u00e1pov\u011bda s obrovsk\u00fdm mno\u017estv\u00edm spou\u0161t\u011bc\u00edch mo\u017enost\u00ed, nap\u0159\u00edklad:<\/p>\n<p><\/p>\n<p><strong>\u2014rozsah<\/strong> \u2014 rozsah<br \/>\nPokud je spolu s URL pro skenov\u00e1n\u00ed uveden parametr scope, lze regulovat oblast skenov\u00e1n\u00ed webu t\u00edm, \u017ee uvedete bu\u010f jednotlivou str\u00e1nku, nebo v\u0161echny str\u00e1nky, kter\u00e9 lze na webu naj\u00edt.<\/p>\n<p><\/p>\n<p><strong>-s<\/strong> a <strong>-x<\/strong> \u2014 parametry pro p\u0159id\u00e1n\u00ed nebo odstran\u011bn\u00ed konkr\u00e9tn\u00edch URL adres. Tyto parametry jsou u\u017eite\u010dn\u00e9, pokud je t\u0159eba p\u0159idat nebo odstranit konkr\u00e9tn\u00ed URL adresu v procesu skenov\u00e1n\u00ed.<\/p>\n<p><\/p>\n<p><strong>\u2014p\u0159esko\u010dit<\/strong> \u2014 zadan\u00fd parametr s t\u00edmto kl\u00ed\u010dem bude skenov\u00e1n, ale nebude napaden. U\u017eite\u010dn\u00e9, pokud existuj\u00ed n\u011bjak\u00e9 nebezpe\u010dn\u00e9 parametry, kter\u00e9 je lep\u0161\u00ed p\u0159i skenov\u00e1n\u00ed vylou\u010dit.<\/p>\n<p><\/p>\n<p><strong>\u2014ov\u011b\u0159it-ssl<\/strong> \u2014 zapnut\u00ed nebo vypnut\u00ed kontroly certifik\u00e1tu.<br \/>\nSkener Wapiti je modul\u00e1rn\u00ed. Pro spu\u0161t\u011bn\u00ed konkr\u00e9tn\u00edch modul\u016f z t\u011bch, kter\u00e9 se automaticky p\u0159ipojuj\u00ed b\u011bhem pr\u00e1ce skeneru, je t\u0159eba pou\u017e\u00edt kl\u00ed\u010d -m a vyjmenovat po\u017eadovan\u00e9 odd\u011blen\u011b \u010d\u00e1rkou. Pokud kl\u00ed\u010d nepou\u017eijete, budou ve v\u00fdchoz\u00edm nastaven\u00ed aktivn\u00ed v\u0161echny moduly. V nejjednodu\u0161\u0161\u00ed variant\u011b to bude vypadat takto:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u http:\/\/sites.vulns.pentestit.ru\/ -m sql,xss,xxe<\/code><\/pre>\n<p><\/p>\n<p>Tento p\u0159\u00edklad pou\u017eit\u00ed znamen\u00e1, \u017ee budeme pou\u017e\u00edvat pouze moduly SQL, XSS a XXE p\u0159i skenov\u00e1n\u00ed c\u00edle. Krom\u011b toho lze filtrovat pr\u00e1ci modul\u016f podle po\u017eadovan\u00e9 metody. Nap\u0159\u00edklad <strong>-m \u201cxss: get, blindsql: post, xxe: post\u201d<\/strong>. V takov\u00e9m p\u0159\u00edpad\u011b modul <strong>xss<\/strong> bude aplikov\u00e1n na po\u017eadavky odes\u00edlan\u00e9 metodou GET, zat\u00edmco modul <strong>blibdsql<\/strong> bude pou\u017eit pro POST po\u017eadavky atd. Mimochodem, pokud n\u011bkter\u00fd modul, kter\u00fd byl za\u0159azen do seznamu, nebyl b\u011bhem skenov\u00e1n\u00ed pot\u0159ebn\u00fd nebo b\u011b\u017e\u00ed velmi dlouho, stisknut\u00edm kombinace Ctrl+C m\u016f\u017eete p\u0159esko\u010dit pou\u017eit\u00ed aktu\u00e1ln\u00edho modulu a vybrat odpov\u00eddaj\u00edc\u00ed polo\u017eku v interaktivn\u00edm menu.<\/p>\n<p><\/p>\n<p>Wapiti podporuje zas\u00edl\u00e1n\u00ed po\u017eadavk\u016f p\u0159es proxy server pomoc\u00ed kl\u00ed\u010de <strong>-p<\/strong> a autentizaci na c\u00edlov\u00e9m webu p\u0159es parametr <strong>-a<\/strong>. Tak\u00e9 je mo\u017en\u00e9 ur\u010dit typ autentizace: <strong>Basi\u010d<\/strong>, <strong>Digest<\/strong>, <strong>Kerberos<\/strong> a <strong>NTLM<\/strong>. Pro posledn\u00ed dva m\u016f\u017ee b\u00fdt nutn\u00e9 nainstalovat dal\u0161\u00ed moduly. Krom\u011b toho je mo\u017en\u00e9 vkl\u00e1dat do po\u017eadavk\u016f jak\u00e9koliv hlavi\u010dky (v\u010detn\u011b libovoln\u00e9 <strong>User-Agent<\/strong>) a mnoho dal\u0161\u00edho.<\/p>\n<p><\/p>\n<p>Pro pou\u017eit\u00ed autentizace m\u016f\u017eete pou\u017e\u00edt n\u00e1stroj <strong>wapiti-getcookie<\/strong>. S jeho pomoc\u00ed vytvo\u0159\u00edme <strong>cookie<\/strong>, kter\u00e9 Wapiti pou\u017eije p\u0159i skenov\u00e1n\u00ed. Vytv\u00e1\u0159en\u00ed <strong>cookie<\/strong> se prov\u00e1d\u00ed pomoc\u00ed p\u0159\u00edkazu:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie -u http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json<\/code><\/pre>\n<p><\/p>\n<p>B\u011bhem pr\u00e1ce v interaktivn\u00edm re\u017eimu odpov\u00edd\u00e1me na ot\u00e1zky a uv\u00e1d\u00edme pot\u0159ebn\u00e9 informace typu: u\u017eivatelsk\u00e9 jm\u00e9no, heslo a dal\u0161\u00ed:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/1f858db74cd11b0837d0aeca890af816.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Na v\u00fdstupu obdr\u017e\u00edme soubor ve form\u00e1tu JSON. Jinou mo\u017enost\u00ed je p\u0159idat v\u0161echny pot\u0159ebn\u00e9 informace prost\u0159ednictv\u00edm parametru <strong>-d<\/strong>:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie - http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json -d &quot;username=admin&amp;password=admin&amp;enter=submit&quot;<\/code><\/pre>\n<p><\/p>\n<p>V\u00fdsledek bude podobn\u00fd:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/87e0923c3027bdda5f1ccf0d4e08a10f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>P\u0159i p\u0159ezkoum\u00e1n\u00ed z\u00e1kladn\u00ed funk\u010dnosti skeneru se kone\u010dn\u00fdm po\u017eadavkem pro testov\u00e1n\u00ed webov\u00e9 aplikace v na\u0161em p\u0159\u00edpad\u011b stal:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti --level 1 -u http:\/\/sites.vulns.pentestit.ru\/ -f html -o \/tmp\/vulns.html -m all --color -\u0441 cookie.json --scope folder --flush-session -A 'Pentestit Scans' -p http:\/\/proxy.office.pentestit.ru:3128<\/code><\/pre>\n<p><\/p>\n<p>kde mezi dal\u0161\u00edmi parametry:<\/p>\n<p><\/p>\n<p><strong>-f<\/strong> a <strong>-o<\/strong> \u2014 form\u00e1t a cesta pro ulo\u017een\u00ed zpr\u00e1vy;<\/p>\n<p><\/p>\n<p><strong>-m<\/strong> \u2014 p\u0159ipojen\u00ed v\u0161ech modul\u016f \u2014 nedoporu\u010duje se, proto\u017ee to ovlivn\u00ed \u010das testov\u00e1n\u00ed a velikost zpr\u00e1vy;<\/p>\n<p><\/p>\n<p><strong>\u2014barva<\/strong> \u2014 zv\u00fdrazn\u011bn\u00ed nalezen\u00fdch zranitelnost\u00ed podle jejich z\u00e1va\u017enosti podle verze samotn\u00e9ho Wapiti;<\/p>\n<p><\/p>\n<p><strong>-c<\/strong> \u2014 pou\u017eit\u00ed souboru s <strong>cookie<\/strong>, vygenerovan\u00e9ho pomoc\u00ed <strong>wapiti-getcookie<\/strong>; <\/p>\n<p><\/p>\n<p><strong>\u2014rozsah<\/strong> \u2014 v\u00fdb\u011br c\u00edle pro \u00fatok. Vybr\u00e1n\u00edm varianty <strong>folder<\/strong> bude skenov\u00e1n a \u00fatok prob\u011bhne na ka\u017ed\u00fd URL po\u010d\u00ednaje z\u00e1kladn\u00edm. Z\u00e1kladn\u00ed URL mus\u00ed m\u00edt lom\u00edtko (bez n\u00e1zvu souboru);<\/p>\n<p><\/p>\n<p><strong>\u2014vypr\u00e1zdnit-sezen\u00ed<\/strong> \u2014 umo\u017e\u0148uje prov\u00e1d\u011bt op\u011btovn\u00e9 skenov\u00e1n\u00ed, p\u0159i kter\u00e9m nebudou br\u00e1ny v \u00favahu p\u0159edchoz\u00ed v\u00fdsledky;<\/p>\n<p><\/p>\n<p><strong>-A<\/strong> \u2014 vlastn\u00ed <strong>User-Agent<\/strong>;<\/p>\n<p><\/p>\n<p><strong>-p<\/strong> \u2014 adresa proxy serveru, pokud je pot\u0159eba.<\/p>\n<p><\/p>\n<h3 id=\"nemnogo-ob-otchete\">N\u011bco o zpr\u00e1v\u011b<\/h3>\n<p><\/p>\n<p>V\u00fdsledek skenov\u00e1n\u00ed je prezentov\u00e1n ve form\u011b podrobn\u00e9 zpr\u00e1vy o v\u0161ech nalezen\u00fdch zranitelnostech v HTML form\u00e1tu, srozumiteln\u00fdm a pohodln\u00fdm pro \u010dten\u00ed. Ve zpr\u00e1v\u011b budou uvedeny kategorie a po\u010det nalezen\u00fdch zranitelnost\u00ed, jejich popis, dotazy, p\u0159\u00edkazy pro <strong>curl<\/strong> a rady, jak je uzav\u0159\u00edt. Pro usnadn\u011bn\u00ed navigace budou p\u0159id\u00e1ny odkazy do n\u00e1zv\u016f kategori\u00ed, na kter\u00e9 m\u016f\u017eete kliknout a p\u0159ej\u00edt k nim:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/39d35304b6f2ea20fd9096e167daabd5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Podstatnou nev\u00fdhodou zpr\u00e1vy je absence mapy webov\u00e9 aplikace, bez kter\u00e9 nen\u00ed jasn\u00e9, zda byly analyzov\u00e1ny v\u0161echny adresy a parametry. Tak\u00e9 existuje pravd\u011bpodobnost fale\u0161n\u00fdch pozitiv. V na\u0161em p\u0159\u00edpad\u011b se ve zpr\u00e1v\u011b objevuj\u00ed \"z\u00e1lo\u017en\u00ed soubory\" a \"potenci\u00e1ln\u011b nebezpe\u010dn\u00e9 soubory\". Jejich po\u010det neodpov\u00edd\u00e1 skute\u010dnosti, proto\u017ee takov\u00e9 soubory na serveru nebyly:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/09c6f8945e6fb6dc6de1388f71fc96bb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Mo\u017en\u00e1, \u017ee nefunk\u010dn\u00ed moduly budou \u010dasem opraveny. Dal\u0161\u00ed nev\u00fdhodou zpr\u00e1vy je absence ozna\u010den\u00ed nalezen\u00fdch zranitelnost\u00ed (v z\u00e1vislosti na jejich z\u00e1va\u017enosti), nebo alespo\u0148 jejich rozd\u011blen\u00ed podle kategori\u00ed. Jedin\u00fd zp\u016fsob, jak se nep\u0159\u00edmo dozv\u011bd\u011bt o z\u00e1va\u017enosti nalezen\u00e9 zranitelnosti, je pou\u017e\u00edt parametr <strong>\u2014barva<\/strong> p\u0159i skenov\u00e1n\u00ed a tehdy budou nalezen\u00e9 zranitelnosti za\u0161krtnut\u00e9 r\u016fzn\u00fdmi barvami:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/46f4c34f9215117eeddd96db633e9e3e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ale ve samotn\u00e9 zpr\u00e1v\u011b takov\u00e9 ozna\u010den\u00ed nen\u00ed zahrnuto.<\/p>\n<p><\/p>\n<h3 id=\"uyazvimosti\">Zranitelnosti<\/h3>\n<p><\/p>\n<h4 id=\"sqli\">SQLi<\/h4>\n<p><\/p>\n<p>Scanner se \u010d\u00e1ste\u010dn\u011b zhostil hled\u00e1n\u00ed SQLi. P\u0159i hled\u00e1n\u00ed SQL zranitelnost\u00ed na str\u00e1nk\u00e1ch, kde nen\u00ed vy\u017eadov\u00e1no ov\u011b\u0159en\u00ed, nevznikaj\u00ed \u017e\u00e1dn\u00e9 probl\u00e9my:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/f9ffef805a115c1a7d47c068a38794bf.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nepoda\u0159ilo se naj\u00edt zranitelnost na str\u00e1nk\u00e1ch, kter\u00e9 jsou p\u0159\u00edstupn\u00e9 pouze po ov\u011b\u0159en\u00ed, ani s pou\u017eit\u00edm platn\u00fdch <strong>cookie<\/strong>, proto\u017ee pravd\u011bpodobn\u011b po \u00fasp\u011b\u0161n\u00e9 autentizaci dojde k \"odhl\u00e1\u0161en\u00ed z relace\" a <strong>cookie<\/strong> se stanou neplatn\u00fdmi. Kdyby byla funkce deautentizace provedena jako samostatn\u00fd skript odpov\u00eddaj\u00edc\u00ed za zpracov\u00e1n\u00ed tohoto postupu, mohlo by to b\u00fdt pln\u011b vylou\u010deno pomoc\u00ed parametru -x, a tak by se p\u0159ede\u0161lo jeho spu\u0161t\u011bn\u00ed. Jinak se jeho zpracov\u00e1n\u00ed vylou\u010dit nepoda\u0159\u00ed. Toto je probl\u00e9m konkr\u00e9tn\u00edho modulu, ale d\u00edky tomu nuance se nepoda\u0159ilo odhalit n\u011bkolik injekc\u00ed v uzav\u0159en\u00e9 oblasti zdroje.<\/p>\n<p><\/p>\n<h4 id=\"xss\">XSS<\/h4>\n<p><\/p>\n<p>Se zadan\u00fdm \u00fakolem se skener skv\u011ble popral a na\u0161el v\u0161echny p\u0159ipraven\u00e9 zranitelnosti:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/ae43bf1f7d78224a5df5f2ef733f8203.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"lfirfi\">LFI\/RFI<\/h4>\n<p><\/p>\n<p>Skener na\u0161el v\u0161echny vlo\u017een\u00e9 zranitelnosti:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrola webu na zranitelnosti vlastn\u00edmi silami\" src=\"\/wp-content\/uploads\/2020\/07\/9056c7911237b607a6b12cc2e5a488d3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Celkov\u011b, i p\u0159es fale\u0161n\u00e9 pozitivn\u00ed v\u00fdsledky a vynechan\u00e9 zranitelnosti, Wapiti, jako bezplatn\u00fd n\u00e1stroj, vykazuje docela dobr\u00e9 v\u00fdsledky. V ka\u017ed\u00e9m p\u0159\u00edpad\u011b je t\u0159eba uznat, \u017ee skener je pom\u011brn\u011b siln\u00fd, flexibiln\u00ed a multifunk\u010dn\u00ed, a co je nejd\u016fle\u017eit\u011bj\u0161\u00ed \u2014 je zdarma, tak\u017ee si zaslou\u017e\u00ed va\u0161i pozornost, pom\u00e1h\u00e1 administr\u00e1tor\u016fm a v\u00fdvoj\u00e1\u0159\u016fm z\u00edskat z\u00e1kladn\u00ed informace o stavu zabezpe\u010den\u00ed webov\u00e9 aplikace.<\/p>\n<p><\/p>\n<p>Z\u016fsta\u0148te zdrav\u00ed a chr\u00e1n\u011bn\u00ed!<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/510998\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":88993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-88992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wapiti \u2014 kontrola webu na zranitelnosti sv\u00e9pomoc\u00ed | ProHoster","description":"V minulosti","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-17T05:42:02+00:00","article:modified_time":"2020-07-17T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88992","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:45:41","updated":"2022-09-28 15:58:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/88992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=88992"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/88992\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/88993"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=88992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=88992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=88992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}