Package core :: Package controllers :: Package basePlugin :: Module baseAuditPlugin :: Class baseAuditPlugin
[hide private]

Class baseAuditPlugin




This is the base class for audit plugins, all audit plugins should inherit from it and implement the following methods :
  1. audit(...)



Author: Andres Riancho ( andres.riancho@gmail.com )

Instance Methods [hide private]
 
__init__(self)
 
_analyzeResult(self, mutant, res)
This method analyzes the result of _sendMutant().
 
_hasNoBug(self, plugin, kbVar, uri, variable)
Verify if a variable name has a reported sql injection vuln ( in the kb ).
 
audit(self, freq)
The freq is a fuzzable_request that is going to be modified and sent.
 
audit_wrapper(self, fuzzable_request)
Receives a fuzzable_request and forwards it to the internal method audit()
 
getType(self)

Inherited from basePlugin.basePlugin: __eq__, end, getDesc, getLongDesc, getName, getOptions, getPluginDeps, printUniq, setOptions, setUrlOpener

Inherited from basePlugin.basePlugin (private): _sendMutant

Method Details [hide private]

__init__(self)
(Constructor)

 
Overrides: basePlugin.basePlugin.__init__

_analyzeResult(self, mutant, res)

 

This method analyzes the result of _sendMutant().

This method MUST be implemented on every plugin.
Parameters:
  • mutant - The mutant that was sent using _sendMutant
  • res - The response of _sendMutant
Overrides: basePlugin.basePlugin._analyzeResult

_hasNoBug(self, plugin, kbVar, uri, variable)

 
Verify if a variable name has a reported sql injection vuln ( in the kb ).
Parameters:
  • uri - The uri where we should search for bugs.
  • variable - The variable that is queryed for bugs.
Returns:
True if the variable HAS a reported bug.

audit(self, freq)

 

The freq is a fuzzable_request that is going to be modified and sent.

This method MUST be implemented on every plugin.
Parameters:
  • freq - A fuzzable_request

audit_wrapper(self, fuzzable_request)

 
Receives a fuzzable_request and forwards it to the internal method audit()
Parameters:
  • fuzzable_request - A fuzzable_request instance

getType(self)

 
Overrides: basePlugin.basePlugin.getType