Class: Rex::Parser::NetSparkerXMLStreamParser
- Inherits:
-
Object
- Object
- Rex::Parser::NetSparkerXMLStreamParser
- Defined in:
- lib/rex/parser/netsparker_xml.rb
Instance Attribute Summary collapse
-
#on_found_vuln ⇒ Object
Returns the value of attribute on_found_vuln.
Instance Method Summary collapse
- #attlist ⇒ Object
- #cdata ⇒ Object
- #comment(str) ⇒ Object
-
#initialize(on_found_vuln = nil) ⇒ NetSparkerXMLStreamParser
constructor
A new instance of NetSparkerXMLStreamParser.
- #instruction(name, instruction) ⇒ Object
- #reset_state ⇒ Object
- #tag_end(name) ⇒ Object
- #tag_start(name, attributes) ⇒ Object
- #text(str) ⇒ Object
-
#xmldecl(version, encoding, standalone) ⇒ Object
We don’t need these methods, but they’re necessary to keep REXML happy.
Constructor Details
#initialize(on_found_vuln = nil) ⇒ NetSparkerXMLStreamParser
Returns a new instance of NetSparkerXMLStreamParser.
9 10 11 12 |
# File 'lib/rex/parser/netsparker_xml.rb', line 9 def initialize(on_found_vuln = nil) self.on_found_vuln = on_found_vuln if on_found_vuln reset_state end |
Instance Attribute Details
#on_found_vuln ⇒ Object
Returns the value of attribute on_found_vuln.
7 8 9 |
# File 'lib/rex/parser/netsparker_xml.rb', line 7 def on_found_vuln @on_found_vuln end |
Instance Method Details
#attlist ⇒ Object
88 |
# File 'lib/rex/parser/netsparker_xml.rb', line 88 def attlist; end |
#cdata ⇒ Object
85 |
# File 'lib/rex/parser/netsparker_xml.rb', line 85 def cdata; end |
#comment(str) ⇒ Object
86 |
# File 'lib/rex/parser/netsparker_xml.rb', line 86 def comment(str); end |
#instruction(name, instruction) ⇒ Object
87 |
# File 'lib/rex/parser/netsparker_xml.rb', line 87 def instruction(name, instruction); end |
#reset_state ⇒ Object
14 15 16 17 18 |
# File 'lib/rex/parser/netsparker_xml.rb', line 14 def reset_state @state = :generic_state @vuln = {'info' => []} @attr = {} end |
#tag_end(name) ⇒ Object
72 73 74 75 76 77 78 79 80 81 |
# File 'lib/rex/parser/netsparker_xml.rb', line 72 def tag_end(name) case name when "vulnerability" @vuln.keys.each do |k| @vuln[k] = @vuln[k].strip if @vuln[k].kind_of?(::String) end on_found_vuln.call(@vuln) if on_found_vuln reset_state end end |
#tag_start(name, attributes) ⇒ Object
20 21 22 23 24 25 26 27 28 |
# File 'lib/rex/parser/netsparker_xml.rb', line 20 def tag_start(name, attributes) @state = "in_#{name.downcase}".intern @attr = attributes case name when "vulnerability" @vuln['confirmed'] = attributes['confirmed'] end end |
#text(str) ⇒ Object
30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 |
# File 'lib/rex/parser/netsparker_xml.rb', line 30 def text(str) case @state when :in_url @vuln['url'] ||= "" @vuln['url'] += str when :in_type @vuln['type'] ||= "" @vuln['type'] += str when :in_severity @vuln['severity'] ||= "" @vuln['severity'] += str when :in_vulnerableparametertype @vuln["vparam_type"] ||= "" @vuln["vparam_type"] += str when :in_vulnerableparameter @vuln["vparam_name"] ||= "" @vuln["vparam_name"] += str when :in_vulnerableparametervalue @vuln["vparam_value"] ||= "" @vuln["vparam_value"] += str when :in_rawrequest @vuln["request"] ||= "" @vuln["request"] += str when :in_rawresponse @vuln["response"] ||= "" @vuln["response"] += str when :in_info # <info name="Identified Internal Path(s)">C:\AppServ\www\test-apps\dokeos\main\inc\banner.inc.php</info> if not str.to_s.strip.empty? @vuln['info'] << [@attr['name'] || "Information", str] end when :in_netsparker when :in_target when :in_scantime when :generic_state when :in_vulnerability when :in_extrainformation else # $stderr.puts "unknown state: #{@state}" end end |
#xmldecl(version, encoding, standalone) ⇒ Object
We don’t need these methods, but they’re necessary to keep REXML happy
84 |
# File 'lib/rex/parser/netsparker_xml.rb', line 84 def xmldecl(version, encoding, standalone); end |