Changeset 324 for trunk/plugins/nikto_core.plugin

Timestamp:

02/10/2010 02:15:09 PM (3 years ago)

Author:

sullo

Message:

Added general content searching on all requests made with fetch() and nfetch(), with the strings coming from db_content_search

File:

• trunk/plugins/nikto_core.plugin (modified) (5 diffs)

trunk/plugins/nikto_core.plugin

@@ -958 +958 @@
 sub load_databases
 {
- my @dbs=qw/db_404_strings  db_outdated  db_realms  db_tests  db_variables/;
+ my @dbs=qw/db_404_strings  db_outdated  db_realms  db_tests  db_variables db_content_search/;
  my $prefix = $_[0];
 
@@ -1013 +1013 @@
                         }
            }
+
+       # db_content_search
+       elsif ($file eq 'db_content_search') {
+                foreach my $l (@file) { 
+                        my @T=parse_csv($l);
+                        $CONTENTSEARCH{$T[0]}{'osvdb'}=$T[1];
+                        $CONTENTSEARCH{$T[0]}{'string'}=$T[2];
+                        $CONTENTSEARCH{$T[0]}{'message'}=$T[3];
+                        }
+           }
    
        # db_outdated
@@ -1177 +1187 @@
  nprint "\n";
  exit;
+}
+###############################################################################
+sub content_search
+{
+ my $body=shift;
+ my $file=shift;
+ my $method=shift || "GET";
+ my ($mark) = @_;
+
+ foreach my $testid (keys %CONTENTSEARCH) {
+        if ($body =~ /$CONTENTSEARCH{$testid}{string}/i) {
+                my $outmessage = "$file: $CONTENTSEARCH{$testid}{'message'}";
+                add_vulnerability($mark, $outmessage, $CONTENTSEARCH{$testid}{testid}, $CONTENTSEARCH{$testid}{osvdb}, $method, $file);
+                }
+        }
+
+ return;
 }
 ###############################################################################
@@ -2049 +2076 @@
     }
  }
+
+ # content search
+ content_search($result{whisker}->{data}, $request{whisker}->{uri}, $request{whisker}->{method});
+
  $request{'User-Agent'}=$temp_ua; # reset UA
  return $result{'whisker'}->{'code'}, $result{'whisker'}->{'data'};
@@ -2170 +2201 @@
       }
    }
+
+   # content search
+   content_search($result{whisker}->{data}, $request{whisker}->{uri}, $request{whisker}->{method}, $mark);
 
    return $result{'whisker'}->{'code'}, $result{'whisker'}->{'data'}, $result{'whisker'}->{'error'};