entity

Documentation

Index

• Variables
• func AppendOutOfOrigin(page string, externalLink string)
• func ResetVulnMap()
• type CrawlFormData
• type HtmlForm
• type Issue
• type JsonCookie
• type JsonMessage
• type JsonNode
  • func (a JsonNode) Len() int
  • func (a JsonNode) Less(i, j int) bool
  • func (a JsonNode) Swap(i, j int)
• type Message
• type Node
• type RequestStruct
• type ScanFormData
• type TestStruct
• type Vuln
• type Vulns
  • func (a Vulns) Len() int
  • func (a Vulns) Less(i, j int) bool
  • func (a Vulns) Swap(i, j int)

Variables

var JsonNodes = JsonNode{}

var Nodes = Node{
	Path: "/",
}

var OutOfOrigin = make(map[string][]string)

var RequestDelay time.Duration = 0

var Vulnmap = map[string]*Vuln{
	"Cross_Site_Request_Forgery": &csrfVuln,
	"Reflected_XSS":              &reflectedxssVuln,
	"Stored_XSS":                 &storedxssVuln,
	"OS_Command_Injection":       &osciVuln,
	"Directory_Traversal":        &dirtraversalVuln,
	"Time_based_SQL_Injection":   &timebasedsqliVuln,
	"Error_Based_SQL_Injection":  &errbasedsqliVuln,
	"Open_Redirect":              &openredirectVuln,
	"HTTP_Header_Injection":      &httpheaderiVuln,
	"Directory_Listing":          &dirlistingVuln,
}

var WholeIssue []Issue

Functions

func AppendOutOfOrigin

func AppendOutOfOrigin(page string, externalLink string)

func ResetVulnMap

func ResetVulnMap()

Types

type CrawlFormData

type CrawlFormData struct {
	Name         []string `form:"name[]"`
	Value        []string `form:"value[]"`
	LoginURL     string   `form:"loginURL"`
	LoginReferer string   `form:"loginReferer"`
	LoginKey     []string `form:"loginKey[]"`
	LoginValue   []string `form:"loginValue[]"`
	LoginMethod  []string `form:"loginMethod[]"`
	ExclusiveURL []string `form:"exclusiveURL[]"`
	Delay        string   `form:"delay"`
}

type HtmlForm

type HtmlForm struct {
	Action      string
	Method      string
	Type        string
	Name        *string
	Value       *string
	Placeholder *string
	IsOption    bool
	Options     []string
}

type Issue

type Issue struct {
	URL       string
	Kind      string
	Parameter string
	Payload   string
	Evidence  string
	Request   string
	Response  string
}

type JsonCookie

type JsonCookie struct {
	Path  string `json:"path"`
	Name  string `json:"name"`
	Value string `json:"value"`
}

type JsonMessage

type JsonMessage struct {
	URL        string        `json:"url"`
	Time       float64       `json:"time"`
	Referer    string        `json:"referer"`
	GetParams  url.Values    `json:"getParams"`
	PostParams url.Values    `json:"postParams"`
	Candidate  []JsonMessage `json:"candidate"`
}

type JsonNode

type JsonNode struct {
	Path     string        `json:"path"`
	Cookies  []JsonCookie  `json:"cookies"`
	Messages []JsonMessage `json:"messages"`
	Children []JsonNode    `json:"children"`
	Issue    []Issue       `json:"issue"`

	// Directory Listing scanのためのフィールド。末尾"/"がないのでそのままは使えません。
	URL string `json:"url"`
}

func (JsonNode) Len

func (a JsonNode) Len() int

func (JsonNode) Less

func (a JsonNode) Less(i, j int) bool

func (JsonNode) Swap

func (a JsonNode) Swap(i, j int)

type Message

type Message struct {
	Request http.Request
	Time    float64
}

type Node

type Node struct {
	Parent   *Node
	Path     string
	Children *[]Node
	Messages []Message
}

type RequestStruct

type RequestStruct struct {
	//リンクが存在したページのURL
	Referer *url.URL
	//formの場合はaction
	Path  *url.URL
	Param url.Values
	Form  HtmlForm
}

type ScanFormData

type ScanFormData struct {
	ScanOption     string   `form:"scanOption"`
	LoginURL       string   `form:"loginURL"`
	LoginReferer   string   `form:"loginReferer"`
	LoginKey       []string `form:"loginKey[]"`
	LoginValue     []string `form:"loginValue[]"`
	LoginMethod    []string `form:"loginMethod[]"`
	LandmarkNumber int      `form:"LandmarkNumber"`
	Delay          string   `form:"delay"`
}

type TestStruct

type TestStruct struct {
	//リンクが存在したページのURL
	Origin string
	//formの場合はaction
	Validation string
}

type Vuln

type Vuln struct {
	Name        string  `json:"Name"`
	CWE         string  `json:"CWE"`
	Severity    string  `json:"Severity"`
	Description string  `json:"Description"`
	Mandatory   string  `json:"Mandatory"`
	Insurance   string  `json:"Insurance"`
	Issues      []Issue `json:"Issues"`
}

type Vulns

type Vulns []Vuln

func (Vulns) Len

func (a Vulns) Len() int

func (Vulns) Less

func (a Vulns) Less(i, j int) bool

func (Vulns) Swap

func (a Vulns) Swap(i, j int)