Add module http_post #130
Add module http_post #130
Conversation
OussamaBeng
force-pushed
the
add-mod-check-http-post
branch
from
ceed948
to
efe6c93
Compare
OussamaBeng
force-pushed
the
add-mod-check-http-post
branch
3 times, most recently
from
493bcd5
to
791cdea
Compare
Codecov Report
@@ Coverage Diff @@
## master #130 +/- ##
==========================================
- Coverage 70.92% 70.89% -0.03%
==========================================
Files 76 78 +2
Lines 7563 7621 +58
==========================================
+ Hits 5364 5403 +39
- Misses 2199 2218 +19
Continue to review full report at Codecov.
|
Check if credentials are transported over an encrypted channel
OussamaBeng
force-pushed
the
add-mod-check-http-post
branch
from
791cdea
to
6118d1a
Compare
|
|
||
| if "Letm3in_" not in request.encoded_data + request.encoded_params: | ||
| return | ||
| self.finished = True |
There was a problem hiding this comment.
I think you can remove this line
There was a problem hiding this comment.
Also as an improvement we can keep track of files we marked as vulnerable (using request.path) to prevent duplicates (you can try on http://www.tvsoop.com/ for example which will generate lot of duplicates)
| return | ||
| self.finished = True | ||
|
|
||
| self.log_red(NAME) |
There was a problem hiding this comment.
Please use the output format used by other modules (take example here https://github.com/wapiti-scanner/wapiti/blob/master/wapitiCore/attack/mod_ssrf.py#L253 )
| from wapitiCore.language.language import _ | ||
|
|
||
| TYPE = "vulnerability" | ||
| NAME = _("POST HTTP") |
There was a problem hiding this comment.
Missing translations in en / fr .po files
|
I think this one can be closed now, replaced by module |
Check if credentials are transported over an encrypted channel