|
|
|
|
|
discover(self,
fuzzableRequest)
Searches for new Url's using fuzzing. |
|
|
|
|
_do_request(self,
url,
mutant)
Perform a simple GET to see if the result is an error or not, and
then run the actual fuzzing. |
|
|
|
|
_return_without_eval(self,
uri)
This method tries to lower the false positives. |
|
|
|
|
_mutate(self,
url)
Mutate this URL ! |
|
|
|
|
_mutate_domain_name(self,
url)
If the url is : "http://www.foobar.com/asd.txt" this
method returns: |
|
|
|
|
_mutate_by_appending(self,
url)
Adds something to the end of the url (mutate the file being
requested) |
|
|
|
|
_mutate_file_type(self,
url)
Mutates a URL by changing its filetype, example : url =
http://g.ar/foo.php result = http://g.ar/foo.zip ,
http://g.ar/foo.tgz , etc... |
|
|
|
|
_mutate_path(self,
url)
Mutate the path instead of the file. |
|
|
|
|
| _get_backup_extensions(self) |
|
|
|
|
_get_file_types(self)
Returns:
A list with filetypes commonly used in web apps. |
|
|
|
|
|
|
|
|
|
|
|
|
|
getOptions(self)
Returns:
A list of option objects for this plugin. |
|
|
|
|
setOptions(self,
optionsMap)
This method sets all the options that are configured using the
user interface generated by the framework using the result of
getOptions(). |
|
|
|
|
getPluginDeps(self)
Returns:
A list with the names of the plugins that should be runned before
the current one. |
|
|
|
|
getLongDesc(self)
Returns:
A DETAILED description of the plugin functions and features. |
|
|
|
Inherited from core.controllers.basePlugin.baseDiscoveryPlugin.baseDiscoveryPlugin:
discover_wrapper,
getType
Inherited from core.controllers.basePlugin.basePlugin.basePlugin:
__eq__,
end,
getDesc,
getName,
printUniq,
setUrlOpener
|