Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unknown Firewall (342dfdb0d) #1274

Open
WhatWaf-Firewalls opened this issue Aug 13, 2021 · 0 comments
Open

Unknown Firewall (342dfdb0d) #1274

WhatWaf-Firewalls opened this issue Aug 13, 2021 · 0 comments

Comments

@WhatWaf-Firewalls
Copy link
Collaborator

WhatWaf version: 2.0.3
Running context: ./whatwaf -u ********************* --json -o ../workplaces/localhost/
Fingerprint:

<!--
GET http://localhost:8000 HTTP/1.1
Status code: 404
Date: Fri, 13 Aug 2021 15:20:58 GMT
Server: WSGIServer/0.2 CPython/3.9.2
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
Content-Length: 3724
-->
<!DOCTYPE html>

<html lang="en">
<head>
<meta content="text/html; charset=utf-8" http-equiv="content-type"/>
<title>Page not found at /AND 1=1 UNION ALL SELECT 1,NULL,1,'&lt;script&gt;alert(\"666\")&lt;/script&gt;',table_name FROM information_schema.tables WHERE 2&gt;1--/etc/passwd')</title>
<meta content="NONE,NOARCHIVE" name="robots"/>
<style type="text/css">
    html * { padding:0; margin:0; }
    body * { padding:10px 20px; }
    body * * { padding:0; }
    body { font:small sans-serif; background:#eee; color:#000; }
    body>div { border-bottom:1px solid #ddd; }
    h1 { font-weight:normal; margin-bottom:.4em; }
    h1 span { font-size:60%; color:#666; font-weight:normal; }
    table { border:none; border-collapse: collapse; width:100%; }
    td, th { vertical-align:top; padding:2px 3px; }
    th { width:12em; text-align:right; color:#666; padding-right:.5em; }
    #info { background:#f6f6f6; }
    #info ol { margin: 0.5em 4em; }
    #info ol li { font-family: monospace; }
    #summary { background: #ffc; }
    #explanation { background:#eee; border-bottom: 0px none; }
  </style>
</head>
<body>
<div id="summary">
<h1>Page not found <span>(404)</span></h1>
<table class="meta">
<tr>
<th>Request Method:</th>
<td>GET</td>
</tr>
<tr>
<th>Request URL:</th>
<td>http://localhost:8000/AND%201%3D1%20UNION%20ALL%20SELECT%201,NULL,1,'%3Cscript%3Ealert(%5C%22666%5C%22)%3C/script%3E',table_name%20FROM%20information_schema.tables%20WHERE%202%3E1--/etc/passwd')</td>
</tr>
</table>
</div>
<div id="info">
<p>
      Using the URLconf defined in <code>webapp.urls</code>,
      Django tried these URL patterns, in this order:
      </p>
<ol>
<li>
</li>
<li>
            
                register/
                
            
          </li>
<li>
            
                login/
                
            
          </li>
<li>
            
                logout/
                
            
          </li>
<li>
            
                dashboard/
                
            
          </li>
<li>
            
                targets/
                
            
          </li>
<li>
            
                developer/
                
            
          </li>
<li>
            
                targets_remove/&lt;int:id&gt;
                
            
          </li>
<li>
            
                targets_scan/&lt;int:id&gt;/&lt;int:mode&gt;
                
            
          </li>
<li>
            
                reports/
                
            
          </li>
<li>
            
                pdf_view/&lt;str:archivo&gt;
                
            
          </li>
<li>
            
                admin/
                
            
          </li>
</ol>
<p>
        
        The current path, <code>AND 1=1 UNION ALL SELECT 1,NULL,1,'&lt;script&gt;alert(\"666\")&lt;/script&gt;',table_name FROM information_schema.tables WHERE 2&gt;1--/etc/passwd')</code>, didn't match any of these.
      </p>
</div>
<div id="explanation">
<p>
      You're seeing this error because you have <code>DEBUG = True</code> in
      your Django settings file. Change that to <code>False</code>, and Django
      will display a standard 404 page.
    </p>
</div>
</body>
</html>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant