cyberaz0r / badmoodle Goto Github PK
View Code? Open in Web Editor NEWMoodle community-based vulnerability scanner
License: GNU General Public License v3.0
Moodle community-based vulnerability scanner
License: GNU General Public License v3.0
Nice script. Founds properly vulnerabilities on some testing older 3.9 Moodle instance.
Anyway when I use "--update" it shows an exception. Seems like string 'All previous versions' cannot be processed.
[+] Moodle version: v3.9
[*] Checking for official vulnerabilities from vulnerability database
Traceback (most recent call last):
File "./badmoodle.py", line 235, in <module>
main()
File "./badmoodle.py", line 228, in main
check_official_vulnerabilities(version)
File "./badmoodle.py", line 86, in check_official_vulnerabilities
vulnerabilities_found = list_vulnerabilities(version[1:].split('-')[0])
File "/root/badmoodle/utils/version.py", line 76, in list_vulnerabilities
if check_in_range(ver, vuln_ver):
File "/root/badmoodle/utils/version.py", line 61, in check_in_range
ver_from = int(''.join([str(x).zfill(2) for x in vuln_ver['from'].split('.')]))
ValueError: invalid literal for int() with base 10: 'All previous versions'
Generalization of the code to permit packaging. (Makefile, PKGBUILD and release page)
Command:
python badmoodle.py -U
Result:
[*] Updating badmoodle
[*] Updating vulnerability database by scraping Moodle official security advisory blog
[X] Update failed: error encountered while updating vulnerability database
Traceback (most recent call last):
File "D:\badmoodle-main\badmoodle-main\badmoodle.py", line 30, in update
update_vulnerability_database(verbosity)
File "D:\badmoodle-main\badmoodle-main\lib\update.py", line 174, in update_vulnerability_database
title = advisory.find('h3', class_='h4').get_text()
AttributeError: 'NoneType' object has no attribute 'get_text'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\badmoodle-main\badmoodle-main\badmoodle.py", line 351, in <module>
main()
File "D:\badmoodle-main\badmoodle-main\badmoodle.py", line 230, in main
update(args.verbosity)
File "D:\badmoodle-main\badmoodle-main\badmoodle.py", line 37, in update
print_info('Details of the error are reported in "{}"'.format(exception_logfile()))
TypeError: exception_logfile() missing 1 required positional argument: 'exception'
It would be nice to add colored output to distinguish the various phases of execution and quality of results
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.