org.owasp.webscarab.plugin.xsscrlf
Class XSSCRLFModel

java.lang.Object
  extended by org.owasp.webscarab.plugin.AbstractPluginModel
      extended by org.owasp.webscarab.plugin.xsscrlf.XSSCRLFModel

public class XSSCRLFModel
extends AbstractPluginModel

Author:
meder

Field Summary
 
Fields inherited from class org.owasp.webscarab.plugin.AbstractPluginModel
_changeSupport, _rwl, PROPERTY_BUSY, PROPERTY_MODIFIED, PROPERTY_RUNNING, PROPERTY_STATUS, PROPERTY_STOPPING
 
Constructor Summary
XSSCRLFModel(FrameworkModel model)
          Creates a new instance of ExtensionsModel
 
Method Summary
 Request dequeueRequest()
           
 void enqueueRequest(Request req, java.lang.String paramName)
           
 java.lang.String getCRLFInjectedHeader()
           
 java.lang.String[] getCRLFSuspiciousParameters(ConversationID id, java.lang.String where)
           
 java.lang.String getCRLFTestString()
           
 Request getRequest(ConversationID id)
           
 Response getResponse(ConversationID id)
           
 ConversationModel getSuspectedConversationModel()
           
 ConversationModel getVulnerableConversationModel()
           
 java.lang.String[] getXSSSuspiciousParameters(ConversationID id, java.lang.String where)
           
 java.lang.String getXSSTestString()
           
 boolean isCRLFSuspected(ConversationID id)
           
 boolean isCRLFVulnerable(ConversationID id)
           
 boolean isCRLFVulnerable(HttpUrl url)
           
 boolean isSuspected(HttpUrl url)
           
 boolean isXSSSuspected(ConversationID id)
           
 boolean isXSSVulnerable(ConversationID id)
           
 boolean isXSSVulnerable(HttpUrl url)
           
 void markAsCRLFSuspicious(ConversationID id, HttpUrl url, java.lang.String location, java.lang.String parameter)
           
 void markAsXSSSuspicious(ConversationID id, HttpUrl url, java.lang.String location, java.lang.String parameter)
           
 void setCRLFInjectedHeader(java.lang.String _crlfInjectedHeader)
           
 void setCRLFTestString(java.lang.String _crlfTestString)
           
 void setCRLFVulnerable(ConversationID id, HttpUrl url)
           
 void setXSSTestString(java.lang.String _xssTestString)
           
 void setXSSVulnerable(ConversationID id, HttpUrl url)
           
 
Methods inherited from class org.owasp.webscarab.plugin.AbstractPluginModel
addPropertyChangeListener, addPropertyChangeListener, getStatus, isBusy, isModified, isRunning, isStopping, removePropertyChangeListener, removePropertyChangeListener, setBusy, setModified, setRunning, setStatus, setStopping
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

XSSCRLFModel

public XSSCRLFModel(FrameworkModel model)
Creates a new instance of ExtensionsModel

Method Detail

getVulnerableConversationModel

public ConversationModel getVulnerableConversationModel()

getSuspectedConversationModel

public ConversationModel getSuspectedConversationModel()

markAsXSSSuspicious

public void markAsXSSSuspicious(ConversationID id,
                                HttpUrl url,
                                java.lang.String location,
                                java.lang.String parameter)

markAsCRLFSuspicious

public void markAsCRLFSuspicious(ConversationID id,
                                 HttpUrl url,
                                 java.lang.String location,
                                 java.lang.String parameter)

isXSSSuspected

public boolean isXSSSuspected(ConversationID id)

isCRLFSuspected

public boolean isCRLFSuspected(ConversationID id)

isSuspected

public boolean isSuspected(HttpUrl url)

setCRLFVulnerable

public void setCRLFVulnerable(ConversationID id,
                              HttpUrl url)

isCRLFVulnerable

public boolean isCRLFVulnerable(ConversationID id)

isCRLFVulnerable

public boolean isCRLFVulnerable(HttpUrl url)

setXSSVulnerable

public void setXSSVulnerable(ConversationID id,
                             HttpUrl url)

isXSSVulnerable

public boolean isXSSVulnerable(ConversationID id)

isXSSVulnerable

public boolean isXSSVulnerable(HttpUrl url)

getCRLFSuspiciousParameters

public java.lang.String[] getCRLFSuspiciousParameters(ConversationID id,
                                                      java.lang.String where)

getXSSSuspiciousParameters

public java.lang.String[] getXSSSuspiciousParameters(ConversationID id,
                                                     java.lang.String where)

getXSSTestString

public java.lang.String getXSSTestString()

setXSSTestString

public void setXSSTestString(java.lang.String _xssTestString)

getCRLFTestString

public java.lang.String getCRLFTestString()

setCRLFTestString

public void setCRLFTestString(java.lang.String _crlfTestString)

getCRLFInjectedHeader

public java.lang.String getCRLFInjectedHeader()

setCRLFInjectedHeader

public void setCRLFInjectedHeader(java.lang.String _crlfInjectedHeader)

getRequest

public Request getRequest(ConversationID id)

getResponse

public Response getResponse(ConversationID id)

enqueueRequest

public void enqueueRequest(Request req,
                           java.lang.String paramName)

dequeueRequest

public Request dequeueRequest()