Sha256: 613daf67c255cb8ef972b3be9980e60b3064408e761dcccb1bfbf44d920a70d6
Contents?: true
Size: 1.9 KB
Versions: 7
Compression:
Stored size: 1.9 KB
Contents
require 'sinatra'
require 'sinatra/contrib'
def get_variations( str )
<<-EOHTML
<html>
<script>#{str}</script>
</html>
EOHTML
end
get '/' do
<<-EOHTML
<a href="/link?input=default">Link</a>
<a href="/form">Form</a>
<a href="/cookie">Cookie</a>
<a href="/header">Header</a>
<a href="/link-template">Link template</a>
EOHTML
end
get "/link" do
<<-EOHTML
<a href="/link/append?input=default">Link</a>
EOHTML
end
get "/link/append" do
default = 'default'
return if !params['input'].start_with?( default )
get_variations( params['input'].split( default ).last )
end
get '/link-template' do
<<-EOHTML
<a href="/link-template/append/input/default/stuff">Link</a>
EOHTML
end
get '/link-template/append/input/*/stuff' do
val = params[:splat].first
default = 'default'
return if !val.start_with?( default )
get_variations( val.split( default ).last )
end
get "/form" do
<<-EOHTML
<form action="/form/append">
<input name='input' value='default' />
</form>
EOHTML
end
get "/form/append" do
default = 'default'
return if !params['input'] || !params['input'].start_with?( default )
get_variations( params['input'].split( default ).last )
end
get "/cookie" do
<<-EOHTML
<a href="/cookie/append">Cookie</a>
EOHTML
end
get "/cookie/append" do
default = 'cookie value'
cookies['cookie2'] ||= default
return if !cookies['cookie2'].start_with?( default )
get_variations( cookies['cookie2'].split( default ).last )
end
get "/header" do
<<-EOHTML
<a href="/header/append">Header</a>
EOHTML
end
get "/header/append" do
default = 'arachni_user'
return if !env['HTTP_USER_AGENT'] || !env['HTTP_USER_AGENT'].start_with?( default )
get_variations( env['HTTP_USER_AGENT'].split( default ).last )
end
Version data entries
7 entries across 7 versions & 1 rubygems