org.owasp.webscarab.plugin.xsscrlf
Class XSSCRLFModel
java.lang.Object
org.owasp.webscarab.plugin.AbstractPluginModel
org.owasp.webscarab.plugin.xsscrlf.XSSCRLFModel
public class XSSCRLFModel
- extends AbstractPluginModel
- Author:
- meder
Method Summary |
Request |
dequeueRequest()
|
void |
enqueueRequest(Request req,
java.lang.String paramName)
|
java.lang.String |
getCRLFInjectedHeader()
|
java.lang.String[] |
getCRLFSuspiciousParameters(ConversationID id,
java.lang.String where)
|
java.lang.String |
getCRLFTestString()
|
Request |
getRequest(ConversationID id)
|
Response |
getResponse(ConversationID id)
|
ConversationModel |
getSuspectedConversationModel()
|
ConversationModel |
getVulnerableConversationModel()
|
java.lang.String[] |
getXSSSuspiciousParameters(ConversationID id,
java.lang.String where)
|
java.lang.String |
getXSSTestString()
|
boolean |
isCRLFSuspected(ConversationID id)
|
boolean |
isCRLFVulnerable(ConversationID id)
|
boolean |
isCRLFVulnerable(HttpUrl url)
|
boolean |
isSuspected(HttpUrl url)
|
boolean |
isXSSSuspected(ConversationID id)
|
boolean |
isXSSVulnerable(ConversationID id)
|
boolean |
isXSSVulnerable(HttpUrl url)
|
void |
markAsCRLFSuspicious(ConversationID id,
HttpUrl url,
java.lang.String location,
java.lang.String parameter)
|
void |
markAsXSSSuspicious(ConversationID id,
HttpUrl url,
java.lang.String location,
java.lang.String parameter)
|
void |
setCRLFInjectedHeader(java.lang.String _crlfInjectedHeader)
|
void |
setCRLFTestString(java.lang.String _crlfTestString)
|
void |
setCRLFVulnerable(ConversationID id,
HttpUrl url)
|
void |
setXSSTestString(java.lang.String _xssTestString)
|
void |
setXSSVulnerable(ConversationID id,
HttpUrl url)
|
Methods inherited from class org.owasp.webscarab.plugin.AbstractPluginModel |
addPropertyChangeListener, addPropertyChangeListener, getStatus, isBusy, isModified, isRunning, isStopping, removePropertyChangeListener, removePropertyChangeListener, setBusy, setModified, setRunning, setStatus, setStopping |
Methods inherited from class java.lang.Object |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
XSSCRLFModel
public XSSCRLFModel(FrameworkModel model)
- Creates a new instance of ExtensionsModel
getVulnerableConversationModel
public ConversationModel getVulnerableConversationModel()
getSuspectedConversationModel
public ConversationModel getSuspectedConversationModel()
markAsXSSSuspicious
public void markAsXSSSuspicious(ConversationID id,
HttpUrl url,
java.lang.String location,
java.lang.String parameter)
markAsCRLFSuspicious
public void markAsCRLFSuspicious(ConversationID id,
HttpUrl url,
java.lang.String location,
java.lang.String parameter)
isXSSSuspected
public boolean isXSSSuspected(ConversationID id)
isCRLFSuspected
public boolean isCRLFSuspected(ConversationID id)
isSuspected
public boolean isSuspected(HttpUrl url)
setCRLFVulnerable
public void setCRLFVulnerable(ConversationID id,
HttpUrl url)
isCRLFVulnerable
public boolean isCRLFVulnerable(ConversationID id)
isCRLFVulnerable
public boolean isCRLFVulnerable(HttpUrl url)
setXSSVulnerable
public void setXSSVulnerable(ConversationID id,
HttpUrl url)
isXSSVulnerable
public boolean isXSSVulnerable(ConversationID id)
isXSSVulnerable
public boolean isXSSVulnerable(HttpUrl url)
getCRLFSuspiciousParameters
public java.lang.String[] getCRLFSuspiciousParameters(ConversationID id,
java.lang.String where)
getXSSSuspiciousParameters
public java.lang.String[] getXSSSuspiciousParameters(ConversationID id,
java.lang.String where)
getXSSTestString
public java.lang.String getXSSTestString()
setXSSTestString
public void setXSSTestString(java.lang.String _xssTestString)
getCRLFTestString
public java.lang.String getCRLFTestString()
setCRLFTestString
public void setCRLFTestString(java.lang.String _crlfTestString)
getCRLFInjectedHeader
public java.lang.String getCRLFInjectedHeader()
setCRLFInjectedHeader
public void setCRLFInjectedHeader(java.lang.String _crlfInjectedHeader)
getRequest
public Request getRequest(ConversationID id)
getResponse
public Response getResponse(ConversationID id)
enqueueRequest
public void enqueueRequest(Request req,
java.lang.String paramName)
dequeueRequest
public Request dequeueRequest()