Contents

require 'hpricot'

module Relevance
  module Tarantula

    class AttackHandler 
      include ERB::Util

      def attacks
        Relevance::Tarantula::FormSubmission.attacks.select(&:output)
      end

      def handle(result)
        return unless attacks.size > 0
        regexp = '(' + attacks.map {|a| Regexp.escape a.output}.join('|') + ')'
        response = result.response
        return unless response.html?
        if n = (response.body =~ /#{regexp}/)
          error_result = result.dup
          error_result.success = false
          error_result.description = "XSS error found, match was: #{h($1)}"
          error_result.data = <<-STR
        ########################################################################
        # Text around unescaped string: #{$1}
        ########################################################################
          #{response.body[[0, n - 200].max , 400]}





        ########################################################################
        # Attack information:
        ########################################################################
          #{attacks.select {|a| a.output == $1}[0].to_yaml}
          STR
          error_result
        end
      end
    end

  end
end

Version data entries

11 entries across 11 versions & 2 rubygems

Version	Path
codez-tarantula-0.5.5	lib/relevance/tarantula/attack_handler.rb
codez-tarantula-0.5.4	lib/relevance/tarantula/attack_handler.rb
codez-tarantula-0.5.3	lib/relevance/tarantula/attack_handler.rb
codez-tarantula-0.5.1	lib/relevance/tarantula/attack_handler.rb
codez-tarantula-0.5.0	lib/relevance/tarantula/attack_handler.rb
tarantula-0.5.1	lib/relevance/tarantula/attack_handler.rb
tarantula-0.5.0	lib/relevance/tarantula/attack_handler.rb
tarantula-0.4.3	lib/relevance/tarantula/attack_handler.rb
tarantula-0.4.2	lib/relevance/tarantula/attack_handler.rb
tarantula-0.4.1	lib/relevance/tarantula/attack_handler.rb
tarantula-0.4.0	lib/relevance/tarantula/attack_handler.rb