Class xsrf

This plugin tests for the easiest to exploit xsrf vulnerabilities.

Author: Andres Riancho ( andres.riancho@gmail.com )

Instance Methods

[hide private]

__init__(self)

_fuzzRequests(self, freq)
Tests an URL for xsrf vulnerabilities.

end(self)
This method is called at the end, when w3afCore aint going to use this plugin anymore.

getOptionsXML(self)
This method returns a XML containing the Options that the plugin has.

setOptions(self, OptionList)
This method sets all the options that are configured using the user interface generated by the framework using the result of getOptionsXML().

getPluginDeps(self)

getLongDesc(self)

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin: audit, getType

Inherited from core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin (private): _analyzeResult, _hasNoBug

Inherited from core.controllers.basePlugin.basePlugin.basePlugin: __eq__, getDesc, getName, printUniq, setUrlOpener

Inherited from core.controllers.basePlugin.basePlugin.basePlugin (private): _sendMutant

Method Details

[hide private]

init(self)
(Constructor)

None

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.__init__

_fuzzRequests(self, freq)

Tests an URL for xsrf vulnerabilities.

Parameters:

freq - A fuzzableRequest

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin._fuzzRequests

end(self)

This method is called at the end, when w3afCore aint going to use this plugin anymore.

Overrides: core.controllers.basePlugin.baseAuditPlugin.baseAuditPlugin.end

getOptionsXML(self)

This method returns a XML containing the Options that the plugin has. Using this XML the framework will build a window, a menu, or some other input method to retrieve the info from the user. The XML has to validate against the xml schema file located at : w3af/core/ui/userInterface.dtd