daffainfo
/
bash-bounty
mirror of https://github.com/daffainfo/bash-bounty.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

patch-1
Muhammad Daffa 2020-10-26 22:11:19 +07:00 committed by GitHub
parent 0a22f7c9af
commit 2ed5bb5881
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 123 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

123
Google Maps API Scanner/result.php Normal file
View File

@ -0,0 +1,123 @@
<?php
$input = $_POST['apikey'];
$url = 'https://maps.googleapis.com/maps/api/staticmap?center=45%2C10&zoom=7&size=400x400&key='.$input;
$url2 = 'https://maps.googleapis.com/maps/api/streetview?size=400x400&location=40.720032,-73.988354&fov=90&heading=235&pitch=10&key='.$input;
$url3 = 'https://www.google.com/maps/embed/v1/place?q=place_id:ChIJyX7muQw8tokR2Vf5WBBk1iQ&key='.$input;
$url4 = 'https://maps.googleapis.com/maps/api/directions/json?origin=Disneyland&destination=Universal+Studios+Hollywood4&key='.$input;
$url5 = 'https://maps.googleapis.com/maps/api/geocode/json?latlng=40,30&key='.$input;
$url6 = 'https://maps.googleapis.com/maps/api/distancematrix/json?units=imperial&origins=40.6655101,-73.89188969999998&destinations=40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.6905615%2C-73.9976592%7C40.659569%2C-73.933783%7C40.729029%2C-73.851524%7C40.6860072%2C-73.6334271%7C40.598566%2C-73.7527626%7C40.659569%2C-73.933783%7C40.729029%2C-73.851524%7C40.6860072%2C-73.6334271%7C40.598566%2C-73.7527626&key='.$input;
$url7 = 'https://maps.googleapis.com/maps/api/place/findplacefromtext/json?input=Museum%20of%20Contemporary%20Art%20Australia&inputtype=textquery&fields=photos,formatted_address,name,rating,opening_hours,geometry&key='.$input;
$url8 = 'https://maps.googleapis.com/maps/api/place/autocomplete/json?input=Bingh&types=%28cities%29&key='.$input;
$url9 = 'https://maps.googleapis.com/maps/api/elevation/json?locations=39.7391536,-104.9847034&key='.$input;
$url10 = 'https://maps.googleapis.com/maps/api/timezone/json?location=39.6034810,-119.6822510&timestamp=1331161200&key='.$input;
$url11 = 'https://roads.googleapis.com/v1/nearestRoads?points=60.170880,24.942795|60.170879,24.942796|60.170877,24.942796&key='.$input;
$urlArr = array($url,$url2,$url3,$url4,$url5,$url6,$url7,$url8,$url9,$url10,$url11);
$urlArr2 = array($url4,$url5,$url6,$url7,$url8,$url9,$url10);
$yourProducts = array();
$yourProducts1 = array();
foreach ($urlArr as $key => $value) {
$yourProducts[] = yourCurl($value);
}
foreach ($urlArr2 as $key => $value) {
$yourProducts1[] = getContents($value);
}
function yourCurl($url){
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_NOBODY, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_ENCODING,"");
curl_setopt($ch, CURLOPT_TIMEOUT,10);
$output = curl_exec($ch);
$httpcode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
return $httpcode;
}
function getContents($url) {
$data = file_get_contents($url);
return $data;
}
if ($yourProducts[0] == 200) {
echo "<p>API key is vulnerable for Staticmap API.</p>";
echo $url;
} else if ($yourProducts[0] == 403) {
echo "<p>API key is not vulnerable for Staticmap API.</p>";
}
if ($yourProducts[1] == 200) {
echo "<p>API key is vulnerable for Streetview API.</p>";
echo $url2;
} else if ($yourProducts[1] == 403) {
echo "<p>API key is not vulnerable for Streetview API.</p>";
}
if ($yourProducts[2] == 200) {
echo "<p>API key is vulnerable for Embed API.</p>";
echo $url3;
} else if ($yourProducts[2] == 403) {
echo "<p>API key is not vulnerable for Embed API.</p>";
}
if (strpos($yourProducts1[0], 'REQUEST_DENIED' === false)) {
echo "<p>API key is vulnerable for Directions API.</p>";
echo $url4;
} else if ($yourProducts[3] == 200) {
echo "<p>API key is not vulnerable for Directions API.</p>";
}
if (strpos($yourProducts1[1], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Geocoding API.</p>";
echo $url5;
} else if ($yourProducts[4] == 200) {
echo "<p>API key is not vulnerable for Geocoding API.</p>";
}
if (strpos($yourProducts1[2], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Distance Matrix API.</p>";
echo $url6;
} else if ($yourProducts[5] == 200) {
echo "<p>API key is not vulnerable for Distance Matrix API.</p>";
}
if (strpos($yourProducts1[3], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Find Place from Text API.</p>";
echo $url7;
} else if ($yourProducts[6] == 200) {
echo "<p>API key is not vulnerable for Find Place from Text API.</p>";
}
if (strpos($yourProducts1[4], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Autocomplete API.</p>";
echo $url8;
} else if ($yourProducts[7] == 200) {
echo "<p>API key is not vulnerable for Autocomplete API.</p>";
}
if (strpos($yourProducts1[5], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Elevation API.</p>";
echo $url9;
} else if ($yourProducts[8] == 200) {
echo "<p>API key is not vulnerable for Elevation API.</p>";
}
if (strpos($yourProducts1[5], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Timezone API.</p>";
echo $url10;
} else if ($yourProducts[9] == 200) {
echo "<p>API key is not vulnerable for Timezone API.</p>";
}
if (strpos($yourProducts1[6], 'REQUEST_DENIED') === false) {
echo "<p>API key is vulnerable for Roads API.</p>";
echo $url11;
} else if (strpos($yourProducts[10], '403') === false) {
echo "<p>API key is not vulnerable for Roads API.</p>";
}
?>