''' objects.py Copyright 2006 Andres Riancho This file is part of w3af, w3af.sourceforge.net . w3af is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation version 2 of the License. w3af is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with w3af; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA ''' import core.controllers.outputManager as om from core.controllers.basePlugin.baseGrepPlugin import baseGrepPlugin import core.data.kb.knowledgeBase as kb import core.data.kb.vuln as vuln import core.data.parsers.urlParser as uparser from core.data.getResponseType import * import re class objects(baseGrepPlugin): ''' This plugin greps every page for applets. @author: Andres Riancho ( andres.riancho@gmail.com ) ''' def __init__(self): baseGrepPlugin.__init__(self) self._object = re.compile(r'< *object([^>]*)>',re.IGNORECASE) self._applet = re.compile(r'< *applet([^>]*)>',re.IGNORECASE) self._alreadyAddedObject = [] self._alreadyAddedApplet = [] def _testResponse(self, request, response): if isTextOrHtml(response.getHeaders()) and response.getURL() not in self._alreadyAddedObject: res = self._object.findall( response.getBody() ) if res: v = vuln.vuln() v.setURL( response.getURL() ) v.setId( response.id ) v.setDesc( "The URL : " + v.getURL() + " has an object tag." ) kb.kb.append( self, 'object', v ) self._alreadyAddedObject.append( response.getURL() ) if response.getURL() not in self._alreadyAddedApplet: res = self._applet.findall( response.getBody() ) if res: v = vuln.vuln() v.setURL( response.getURL() ) v.setId( response.id ) v.setDesc( "The URL : " + v.getURL() + " has an applet tag." ) kb.kb.append( self, 'applet', v ) self._alreadyAddedApplet.append( response.getURL() ) def setOptions( self, OptionList ): pass def getOptionsXML(self): ''' This method returns a XML containing the Options that the plugin has. Using this XML the framework will build a window, a menu, or some other input method to retrieve the info from the user. The XML has to validate against the xml schema file located at : w3af/core/output.xsd ''' return '\ \ \ ' def end(self): ''' This method is called when the plugin wont be used anymore. ''' # Print objects self.printUniq( kb.kb.getData( 'objects', 'object' ), 'URL' ) # Print applets self.printUniq( kb.kb.getData( 'objects', 'applet' ), 'URL' ) def getPluginDeps( self ): ''' @return: A list with the names of the plugins that should be runned before the current one. ''' return [] def getLongDesc( self ): ''' @return: A DETAILED description of the plugin functions and features. ''' return ''' This plugin greps every page for applets and other types of objects. '''