Adding WAF script for SecureIIS

waf/secureiis.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2013 sqlmap developers (http://sqlmap.org/)
+See the file 'doc/COPYING' for copying permission
+"""
+
+import re
+
+from lib.core.enums import HTTPHEADER
+
+__product__ = "SecureIIS Web Server Security (BeyondTrust)"
+
+def detect(get_page):
+    page, headers, code = get_page()
+    retval = code != 404
+    page, headers, code = get_page(auxHeaders={HTTPHEADER.TRANSFER_ENCODING: 'a' * 1025, HTTPHEADER.ACCEPT_ENCODING: "identity"})
+    retval = retval and code == 404
+    return retval