Class globalRedirect

This plugin tests for scripts that redirect the browser to any site.

Author: Andres Riancho ( andres.riancho@gmail.com )

Instance Methods

[hide private]

__init__(self)

_fuzzRequests(self, freq)
Tests an URL for global redirect vulnerabilities.

_analyzeResult(self, mutant, response)
Analyze results of the _sendMutant method.

end(self)
This method is called when the plugin wont be used anymore.

_findRedirect(self, response)
This method checks if the browser was redirected ( using a 302 code ) or is being told to be redirected by javascript or <meta http-equiv="refresh"

getOptionsXML(self)
This method returns a XML containing the Options that the plugin has.

setOptions(self, OptionList)
This method sets all the options that are configured using the user interface generated by the framework using the result of getOptionsXML().

getPluginDeps(self)

getLongDesc(self)

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin: audit, getType

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin (private): _hasNoBug

Inherited from core.controllers.basePlugin.basePlugin.basePlugin: __eq__, getDesc, getName, printUniq, setUrlOpener

Inherited from core.controllers.basePlugin.basePlugin.basePlugin (private): _sendMutant

Method Details

[hide private]

init(self)
(Constructor)

None

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.__init__

_fuzzRequests(self, freq)

Tests an URL for global redirect vulnerabilities.

Parameters:

freq - A fuzzableRequest

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin._fuzzRequests

_analyzeResult(self, mutant, response)

Analyze results of the _sendMutant method.

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin._analyzeResult

end(self)

This method is called when the plugin wont be used anymore.

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.end

_findRedirect(self, response)

This method checks if the browser was redirected ( using a 302 code ) or is being told to be redirected by javascript or <meta http-equiv="refresh"

getOptionsXML(self)

This method returns a XML containing the Options that the plugin has. Using this XML the framework will build a window, a menu, or some other input method to retrieve the info from the user. The XML has to validate against the xml schema file located at : w3af/core/ui/userInterface.dtd