コード例 #1
0
ファイル: XSSEvalForm.cs プロジェクト: Kikoth/websec_project
 /// <summary>
 /// Fügt das übergebene ByPassFilterObjekt zur ListView hinzu
 /// </summary>
 /// <param name="byPassObject">Das ByPassObject</param>
 public void AddListViewItem(FilterByPassObject byPassObject)
 {
     if (this.byPassListView.InvokeRequired)
     {
         addListViewItem = new _addListviewItem(AddListViewItem);
         byPassListView.Invoke(addListViewItem, new Object[] { byPassObject });
     }
     else
     {
         byPassListView.Items.Add(new ListViewItem(new string[] { byPassObject.ID.ToString(), byPassObject.ByPassString, String.Empty, String.Empty }));
     }
 }
コード例 #2
0
        public async Task <string> POSTAttack(FilterByPassObject byPassObject, FormContainer item)
        {
            // Update Status des FilterByPassObject (Logging)
            _responseForm.UpdateStatus(byPassObject.ID, "running request...");

            string[] inputs = item.GetInputs().ToArray <string>();

            using (var client = new HttpClient())
            {
                var values = new Dictionary <string, string>();

                try
                {
                    if (inputs != null)
                    {
                        foreach (string input in inputs)
                        {
                            if (input.ToLower() != "submit")
                            {
                                values.Add(input, byPassObject.ByPassString);
                            }
                        }
                    }
                }
                catch (Exception e)
                {
                    return("d");
                }


                // Submit gesetzt? bei Self-Calling Sites
                string[] submit = item.GetSubmit();
                if (submit != null)
                {
                    values.Add(submit[0], submit[1]);
                }

                var content = new FormUrlEncodedContent(values);

                var response = await client.PostAsync(item.Action, content);

                // Update Status des FilterByPassObject (Logging)
                _responseForm.UpdateStatus(byPassObject.ID, "continue ...");


                // Das FilterByPassObject selbst aktualisieren
                byPassObject.ResponseContent = response.ToString() + Environment.NewLine + response.RequestMessage + Environment.NewLine + await response.Content.ReadAsStringAsync();

                return("d");
            }
        }
コード例 #3
0
        public void PerformAnalyzation(FilterByPassObject byPassObject)
        {
            // Update Status des FilterByPassObject (Logging)
            _responseForm.UpdateStatus(byPassObject.ID, "analyzing...");

            bool success = false;

            if (byPassObject.ResponseContent.Contains(byPassObject.ByPassString))
            {
                success = true;
            }

            // Set Result und Ende
            _responseForm.SetResult(byPassObject.ID, success);
            _responseForm.UpdateStatus(byPassObject.ID, "...done");
        }