Class detectPhishing

This plugin greps every page and assigns a phishing score to it.

Author: Andres Riancho ( andres.riancho@gmail.com ) ; special thanks to Matthew Hall !

Instance Methods

[hide private]

__init__(self)

_testResponse(self, request, response)
This method tries to find patterns on responses.

_scoreURL(self, response)
Assign a phishing score to the URL.

_scoreReferences(self, response)
Assign a phishing score to the references.

_scoreBody(self, response)
Assigna phishing score to the body

_scoreForms(self, response)
Assign a phishing score to the forms on the page.

_isLoginForm(self, dc)

setOptions(self, OptionList)
Sets the Options given on the OptionList to self.

getOptionsXML(self)
This method returns a XML containing the Options that the plugin has.

end(self)
This method is called when the plugin wont be used anymore.

getPluginDeps(self)

getLongDesc(self)

Inherited from core.controllers.basePlugin.baseGrepPlugin.baseGrepPlugin: getType, setUrlOpener, testResponse

Inherited from core.controllers.basePlugin.baseGrepPlugin.baseGrepPlugin (private): _wasSent

Inherited from core.controllers.basePlugin.basePlugin.basePlugin: __eq__, getDesc, getName, printUniq

Inherited from core.controllers.basePlugin.basePlugin.basePlugin (private): _sendMutant

Method Details

[hide private]

init(self)
(Constructor)

None

Overrides: core.controllers.basePlugin.baseGrepPlugin.baseGrepPlugin.__init__

_testResponse(self, request, response)

This method tries to find patterns on responses.

This method MUST be implemented on every plugin.

Returns:: If something is found it must be reported to the Output Manager and the KB.

Overrides: core.controllers.basePlugin.baseGrepPlugin.baseGrepPlugin._testResponse: (inherited documentation)

_scoreURL(self, response)

Assign a phishing score to the URL.

Returns:: A number indicating the phishing score of this page.

_scoreReferences(self, response)

Assign a phishing score to the references.

Returns:: A number indicating the phishing score of this page.

_scoreBody(self, response)

Assigna phishing score to the body

_scoreForms(self, response)

Assign a phishing score to the forms on the page.

Returns:: A number indicating the phishing score of this page.

_isLoginForm(self, dc)

Returns:: True if this fuzzableRequest is a loginForm.

setOptions(self, OptionList)

Sets the Options given on the OptionList to self. The options are the result of a user entering some data on a window that was constructed using the XML Options that was retrieved from the plugin using getOptionsXML()

This method MUST be implemented on every plugin.

Returns:: No value is returned.

Overrides: core.controllers.basePlugin.basePlugin.basePlugin.setOptions: (inherited documentation)

getOptionsXML(self)

This method returns a XML containing the Options that the plugin has. Using this XML the framework will build a window, a menu, or some other input method to retrieve the info from the user. The XML has to validate against the xml schema file located at : w3af/core/output.xsd