Changeset 284

Timestamp:

01/27/2010 05:28:56 AM (3 years ago)

Author:

sullo

Message:

Fix perl warnings

Location:

trunk/plugins

Files:

• nikto_cgi.plugin (modified) (2 diffs)
• nikto_dictionary_attack.plugin (modified) (1 diff)
• nikto_embedded.plugin (modified) (1 diff)
• nikto_headers.plugin (modified) (4 diffs)
• nikto_httpoptions.plugin (modified) (2 diffs)
• nikto_user_enum_apache.plugin (modified) (2 diffs)

trunk/plugins/nikto_cgi.plugin

@@ -41 +41 @@
    my @POSSIBLECGI=();
    my @CFGCGI=(split(/ /,$VARIABLES{"\@CGIDIRS"}));
-   my ($res, $possiblecgidir, $found) ="";
+   my ($res, $content, $possiblecgidir, $found) ="";
 
    if (defined $CLI{'forcecgi'} && $CLI{'forcecgi'} eq "all")                       # all possible CGI dirs to be "true" 
@@ -62 +62 @@
       foreach $possiblecgidir (@CFGCGI)
       {
-         ($res, $CONTENT)=nfetch($mark,$possiblecgidir,"GET");
+         ($res, $content)=nfetch($mark,$possiblecgidir,"GET");
          nprint("Checked for CGI dir\t$possiblecgidir\tgot:$res","d");
          if (content_present($res) eq TRUE)

trunk/plugins/nikto_dictionary_attack.plugin

@@ -67 +67 @@
       my $dir=$_;
       if (($ctr % 100) == 0) { nprint("- Directory enumeration guess $ctr ($dir): /$dir/", "v"); }
-      (my $result, $content) = nfetch($mark,"/$dir/", "HEAD");
+      my ($result, $content) = nfetch($mark,"/$dir/", "HEAD");
       foreach my $found (split(/ /, $VARIABLES{"\@HTTPFOUND"}))
       {

trunk/plugins/nikto_embedded.plugin

@@ -64 +64 @@
                $model =~ s/\+/ /g;
                
-               if (model ne "")
+               if ($model ne "")
                {
                   add_vulnerability($mark, "$item->{message} $model",$item->{nikto_id}, 0, "GET", $item->{uri});

trunk/plugins/nikto_headers.plugin

@@ -50 +50 @@
    {
       (my $res, $content) = nfetch($mark,$f, "GET", "", \%headers);
-      if (defined $headers{x-powered-by}) { $xpb{ $headers{x-powered-by} } = 1; }
+      if (defined $headers{'x-powered-by'}) { $xpb{ $headers{'x-powered-by'} } = 1; }
    }
 
@@ -72 +72 @@
       if ($res eq "200")
       {
-         $transheaders{Translate}="f";
+         $transheaders{'Translate'}="f";
          ($res, $content) = nfetch($mark,$f . "\\", "GET", "", \%transheaders);
          if ($res eq "200")
@@ -87 +87 @@
    #######################################################################
    # Servlet-Engine info
-   if (defined $headers{servlet-engine})
-   {
-      my $x = $headers{servlet-engine};
+   if (defined $headers{'servlet-engine'})
+   {
+      my $x = $headers{'servlet-engine'};
       $x = ~s/\(.*$//;
       $x =~ s/\s+//g;
@@ -215 +215 @@
    
    # Now we have a header, let's check ETag for inode
-   if (defined $headers{etag})
-   {
-      my $etag=$headers{etag};
+   if (defined $headers{'etag'})
+   {
+      my $etag=$headers{'etag'};
       $etag =~ s/"//g;
       my @fields = split("-",$etag);

trunk/plugins/nikto_httpoptions.plugin

@@ -83 +83 @@
    }
    # IIS PROPFIND HEADER
-   my %headers=(
+   %headers=(
       "Host" => "",
       "Content-Length" => "0",
@@ -100 +100 @@
 
    # Special checks for TRACE/TRACK to see whether its vulnerable
-   my %headers=(
+   %headers=(
       "Host" => "Nikto",
    );

trunk/plugins/nikto_user_enum_apache.plugin

@@ -123 +123 @@
    {
       if (($ctr % 500) eq 0) { nprint("- User enumeration guess $ctr ($text)", "v"); }
-      (my $result, $content) = nfetch($mark, $url . $text, "HEAD");
+      ($result, $content) = nfetch($mark, $url . $text, "HEAD");
       my $user = nikto_user_enum_apache_check($result, $text);
       if (defined $user)
@@ -164 +164 @@
       if ($_ eq "" ) { next };
       if (($ctr % 500) == 0) { nprint("- User enumeration guess $ctr ($_)", "v"); }
-      (my $result, $content) = nfetch($mark, $url . $_, "HEAD");
+      ($result, $content) = nfetch($mark, $url . $_, "HEAD");
       my $user = nikto_user_enum_apache_check($result, $_);
       if ($user)