Package plugins :: Package audit :: Module responseSplitting :: Class responseSplitting

[frames] | no frames]

Class responseSplitting

This plugin tests for response splitting vulnerabilities.

Author: Andres Riancho ( andres.riancho@gmail.com )

Instance Methods

[hide private]

__init__(self)

_fuzzRequests(self, freq)
Tests an URL for response splitting vulnerabilities.

_getErrors(self)

_analyzeResult(self, mutant, response)
Analyze results of the _sendMutant method.

end(self)
This method is called when the plugin wont be used anymore.

_getResponseSplitStrings(self)
With setOptions the user entered a URL that is the one to be included.

getOptionsXML(self)
This method returns a XML containing the Options that the plugin has.

setOptions(self, OptionList)
This method sets all the options that are configured using the user interface generated by the framework using the result of getOptionsXML().

_checkHeaders(self, headers)
This method verifies if a header was successfully injected

getPluginDeps(self)

getLongDesc(self)

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin: audit, getType

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin (private): _hasNoBug

Inherited from core.controllers.basePlugin.basePlugin.basePlugin: __eq__, getDesc, getName, printUniq, setUrlOpener

Inherited from core.controllers.basePlugin.basePlugin.basePlugin (private): _sendMutant

Method Details

[hide private]

init(self)
(Constructor)

None

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.__init__

_fuzzRequests(self, freq)

Tests an URL for response splitting vulnerabilities.

Parameters:

freq - A fuzzableRequest

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin._fuzzRequests

_getErrors(self)

None

_analyzeResult(self, mutant, response)

Analyze results of the _sendMutant method.

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin._analyzeResult

end(self)

This method is called when the plugin wont be used anymore.

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.end

_getResponseSplitStrings(self)

With setOptions the user entered a URL that is the one to be included. This method returns that URL.

Returns:: A string, see above.

getOptionsXML(self)

This method returns a XML containing the Options that the plugin has. Using this XML the framework will build a window, a menu, or some other input method to retrieve the info from the user. The XML has to validate against the xml schema file located at : w3af/core/ui/userInterface.dtd

Returns:: XML with the plugin options.

Overrides: core.controllers.basePlugin.basePlugin.basePlugin.getOptionsXML

setOptions(self, OptionList)

This method sets all the options that are configured using the user interface generated by the framework using the result of getOptionsXML().

Parameters:

OptionList - A dictionary with the options for the plugin.

Returns:: No value is returned.

Overrides: core.controllers.basePlugin.basePlugin.basePlugin.setOptions

_checkHeaders(self, headers)

This method verifies if a header was successfully injected

Returns:: True / False

getPluginDeps(self)

Returns:: A list with the names of the plugins that should be runned before the current one.

Overrides: core.controllers.basePlugin.basePlugin.basePlugin.getPluginDeps

getLongDesc(self)

Returns:: A DETAILED description of the plugin functions and features.

Overrides: core.controllers.basePlugin.basePlugin.basePlugin.getLongDesc

Class responseSplitting

__init__(self) (Constructor)

_fuzzRequests(self, freq)

_getErrors(self)

_analyzeResult(self, mutant, response)

end(self)

_getResponseSplitStrings(self)

getOptionsXML(self)

setOptions(self, OptionList)

_checkHeaders(self, headers)

getPluginDeps(self)

getLongDesc(self)

init(self)
(Constructor)