scanning

package
Version: v2.6.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 1, 2021 License: MIT Imports: 30 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CRLFAnalysis added in v2.4.0

func CRLFAnalysis(target string, options model.Options, rl *rateLimiter)

CRLFAnalysis is basic check for CRLF Injection

func CheckXSSWithHeadless added in v2.4.0

func CheckXSSWithHeadless(url string, options model.Options) bool

func CodeView

func CodeView(resbody, pattern string) string

CodeView is showing reflected code function

func GetAttrPayload added in v2.4.0

func GetAttrPayload() ([]string, int)

GetAttrPayload is exported interface

func GetCommonPayload added in v2.4.0

func GetCommonPayload() ([]string, int)

GetCommonPayload is exported interface

func GetEventHandlers

func GetEventHandlers() []string

GetEventHandlers is return event handlers (array type) level: 1(none trigger) / 2(user interaction) / 3(direct trigger)

func GetGfXSS

func GetGfXSS() []string

GetGfXSS is get cool parameter name from Gf-Patterns

func GetHTMLPayload added in v2.4.0

func GetHTMLPayload() ([]string, int)

GetHTMLPayload is exported interface

func GetInJsPayload added in v2.4.0

func GetInJsPayload() ([]string, int)

GetInJsPayload is exported interface

func GetPType added in v2.5.0

func GetPType(av string) string

func GetPayloadBoxPayload added in v2.4.0

func GetPayloadBoxPayload() ([]string, int)

GetPayloadBoxPayload is exported interface

func GetPortswiggerPayload added in v2.4.0

func GetPortswiggerPayload() ([]string, int)

GetPortswiggerPayload is exported interface

func GetSpecialChar

func GetSpecialChar() []string

GetSpecialChar is return chars (array type)

func GetTags

func GetTags() []string

GetTags is return tag list (array type)

func GetUsefulCode

func GetUsefulCode() []string

GetUsefulCode is return code list (array type)

func Grepping

func Grepping(data, regex string) []string

Grepping is function for checking pattern

func InterfaceGetEventHandlers added in v2.4.0

func InterfaceGetEventHandlers() ([]string, int)

InterfaceGetEventHandlers is exported interface

func InterfaceGetGfXSS added in v2.4.0

func InterfaceGetGfXSS() ([]string, int)

InterfaceGetGfXSS is exported interface

func InterfaceGetSpecialChar added in v2.4.0

func InterfaceGetSpecialChar() ([]string, int)

InterfaceGetSpecialChar is exported interface

func InterfaceGetTags added in v2.4.0

func InterfaceGetTags() ([]string, int)

InterfaceGetTags is exported interface

func InterfaceGetUsefulCode added in v2.4.0

func InterfaceGetUsefulCode() ([]string, int)

InterfaceGetUsefulCode is exported interface

func MakePoC added in v2.6.0

func MakePoC(poc string, req *http.Request, options model.Options) string

func MakeTargetSlice

func MakeTargetSlice(targets []string) map[string][]string

MakeTargetSlice is make slice for multicast option

func OpenRedirectorAnalysis added in v2.4.0

func OpenRedirectorAnalysis(target string, options model.Options, rl *rateLimiter)

OpenRedirectorAnalysis is basic check for open redirectors

func ParameterAnalysis

func ParameterAnalysis(target string, options model.Options, rl *rateLimiter) map[string][]string

ParameterAnalysis is check reflected and mining params

func SSTIAnalysis

func SSTIAnalysis(target string, options model.Options, rl *rateLimiter)

SSTIAnalysis is basic check for SSTI

func Scan

func Scan(target string, options model.Options, sid string) (model.Result, error)

Scan is main scanning function

func SendReq

func SendReq(req *http.Request, payload string, options model.Options) (string, *http.Response, bool, bool, error)

SendReq is sending http request (handled GET/POST)

func SqliAnalysis

func SqliAnalysis(target string, options model.Options, rl *rateLimiter)

SqliAnalysis is basic check for SQL Injection

func StaticAnalysis

func StaticAnalysis(target string, options model.Options, rl *rateLimiter) (map[string]string, map[int]string)

StaticAnalysis is found information on original req/res

Types

type Asset added in v2.4.0

type Asset struct {
	Line string
	Size string
}

type Queries

type Queries struct {
	// contains filtered or unexported fields
}

Queries is struct of queries

type WAFPattern added in v2.5.0

type WAFPattern struct {
	Name   string
	Body   string
	Header string
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL