PureWaf 2.1.2__tar.gz → 2.2.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. {purewaf-2.1.2 → purewaf-2.2.0}/PKG-INFO +6 -11
  2. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/PureWaf.py +1099 -812
  3. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/__init__.py +3 -3
  4. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/agent.py +54 -27
  5. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/auto.py +387 -32
  6. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/bypass.py +1127 -984
  7. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/bypass_data.py +455 -443
  8. purewaf-2.2.0/PureWaf/php_oracle.py +1111 -0
  9. purewaf-2.2.0/PureWaf/planner.py +192 -0
  10. purewaf-2.2.0/PureWaf/recognition.py +380 -0
  11. purewaf-2.2.0/PureWaf/sast/__init__.py +4 -0
  12. purewaf-2.2.0/PureWaf/sast/cfg.py +338 -0
  13. purewaf-2.2.0/PureWaf/sast/filters.py +194 -0
  14. purewaf-2.2.0/PureWaf/sast/parser.py +196 -0
  15. purewaf-2.2.0/PureWaf/sast/sinks.py +271 -0
  16. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/tamper.py +210 -210
  17. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/utils.py +550 -396
  18. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf/webui.py +1698 -1637
  19. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf.egg-info/PKG-INFO +6 -11
  20. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf.egg-info/SOURCES.txt +15 -0
  21. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf.egg-info/requires.txt +4 -0
  22. {purewaf-2.1.2 → purewaf-2.2.0}/README.md +2 -10
  23. {purewaf-2.1.2 → purewaf-2.2.0}/pyproject.toml +24 -23
  24. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_agent.py +756 -756
  25. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_auto.py +1 -0
  26. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_filter_bypass_fixtures.py +135 -135
  27. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_link_payload_validation.py +33 -33
  28. purewaf-2.2.0/tests/test_php_oracle.py +149 -0
  29. purewaf-2.2.0/tests/test_php_oracle_more.py +121 -0
  30. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_php_versions.py +128 -128
  31. purewaf-2.2.0/tests/test_planner.py +148 -0
  32. purewaf-2.2.0/tests/test_recent_techniques.py +135 -0
  33. purewaf-2.2.0/tests/test_recognition.py +342 -0
  34. purewaf-2.2.0/tests/test_review_regressions.py +344 -0
  35. purewaf-2.2.0/tests/test_sandbox.py +159 -0
  36. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_stress.py +230 -230
  37. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_tamper_plugins.py +115 -115
  38. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_tricks.py +24 -24
  39. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_webui.py +926 -917
  40. {purewaf-2.1.2 → purewaf-2.2.0}/LICENSE +0 -0
  41. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf.egg-info/dependency_links.txt +0 -0
  42. {purewaf-2.1.2 → purewaf-2.2.0}/PureWaf.egg-info/top_level.txt +0 -0
  43. {purewaf-2.1.2 → purewaf-2.2.0}/setup.cfg +0 -0
  44. {purewaf-2.1.2 → purewaf-2.2.0}/tests/test_utils.py +0 -0
{purewaf-2.1.2 → purewaf-2.2.0}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: PureWaf
3
- Version: 2.1.2
3
+ Version: 2.2.0
4
4
  Summary: WAF Bypass Payload Generator
5
5
  Author: Pure Stream
6
6
  License: Apache License
@@ -213,6 +213,9 @@ License-File: LICENSE
213
213
  Requires-Dist: python-dotenv<2,>=1.0
214
214
  Provides-Extra: webui
215
215
  Requires-Dist: flask<4,>=3.1; python_version >= "3.9" and extra == "webui"
216
+ Provides-Extra: sast
217
+ Requires-Dist: tree-sitter>=0.25; extra == "sast"
218
+ Requires-Dist: tree-sitter-php>=0.24; extra == "sast"
216
219
  Dynamic: license-file
217
220
 
218
221
  # PureWaf
@@ -221,6 +224,8 @@ Dynamic: license-file
221
224
 
222
225
  ![](./image/1.png)
223
226
 
227
+ ![](./image/11.png)
228
+
224
229
  该项目仅用于教育和学习环节（比如说CTF），不得应用于其他任何恶意目的。
225
230
 
226
231
  如果该项目出现任何错误或您有任何建议，欢迎在 `issues` 中提出。
@@ -532,16 +537,6 @@ print(res.text)
532
537
  N/A
533
538
  ```
534
539
 
535
- ## Limitations
536
-
537
- - ~~暂时无法实现自定义命令~~（仅适用于RCE场景）
538
- - ~~暂时没有对远程目标的自动发包和回显验证~~
539
- - 暂时没有白名单选项
540
- - ~~暂时只适配 eval($a) 情形~~
541
- - ~~暂时没有多文件的分析能力，auto目前对于默认文件为 /flag 会好用一点~~
542
-
543
- （我们将在未来计划消除这些限制，并同步更新至README）
544
-
545
540
  ## Contributing
546
541
 
547
542
  欢迎在 issues 中提供 PureWaf 无法解出的题目并附带对应的wp！