/*************************************************************************** *   Copyright (C) 2006 by root   * *   18034994@qq.com   * *                                                                         * *   This program is free software; you can redistribute it and/or modify  * *   it under the terms of the GNU General Public License as published by  * *   the Free Software Foundation; either version 2 of the License, or     * *   (at your option) any later version.                                   * *                                                                         * *   This program is distributed in the hope that it will be useful,       * *   but WITHOUT ANY WARRANTY; without even the implied warranty of        * *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         * *   GNU General Public License for more details.                          * *                                                                         * *   You should have received a copy of the GNU General Public License     * *   along with this program; if not, write to the                         * *   Free Software Foundation, Inc.,                                       * *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             * ***************************************************************************/#include "cgiscan.h"cgiscan::cgiscan(QWidget* parent, const char* name, WFlags fl): scandlg(parent,name,fl){}cgiscan::~cgiscan(){}/*$SPECIALIZATION$*/void cgiscan::scan(){    bug[0]="GET /index.htm HTTP/1.0\n\n";    bug[1]="GET /index.html HTTP/1.0\n\n";    bug[2]="GET /index.asp HTTP/1.0\n\n";    bug[3]="GET /index.php HTTP/1.0\n\n";    char *msg="HTTP/1.1 200 OK";    sa.sin_family=AF_INET;    host=gethostbyname(lineEdit->text());    strncpy((char *)&sa.sin_addr,(char *)host->h_addr,sizeof(sa.sin_addr));    sa.sin_port=htons(80);    bzero(&(sa.sin_zero),8);    textEdit->append("start scan---------------------------------------");;    for(i=0;i<4;i++)    {        sd=socket(AF_INET,SOCK_STREAM,0);        ::connect(sd,(struct sockaddr *)&sa,sizeof(struct sockaddr));        send(sd,bug[i],strlen(bug[i]),0);        recv(sd,buff,sizeof(buff),0);        if(strstr(buff,msg)!=NULL)        {            memcpy(bugname,bug[i],strlen(bug[i]));            memset(index(bugname,'\n'),'\0',1);            sprintf(temp,"found cgi bug %s",bugname);            textEdit->append(temp);        }        ::close(sd);    }    textEdit->append("scan end---------------------------------------");}