Class: Ruckus::Mutator::PathTraversal

Inherits:
Modifier show all
Defined in:
lib/ruckus/mutator.rb

Overview

Path traversal metacharacters and keywords, cycled. Add new ones to the STRINGS array.

Constant Summary collapse

STRINGS = 
[ "etc/passwd",
"etc/passwd\x00",
"etc/passwd%00",
"boot.ini",
"boot.ini\x00",
"boot.ini%00" ]

Instance Method Summary collapse

Methods inherited from Modifier

#<<, #go?, #initialize

Constructor Details

This class inherits a constructor from Ruckus::Mutator::Modifier

Instance Method Details

#mod(x) ⇒ Object 



165
166
167
168
169
170
171
 
# File 'lib/ruckus/mutator.rb', line 165

def mod(x)
    x = x + ("../" * (@cur + 1)) + STRINGS[@cur % STRINGS.size]
    if (@cur % 2) == 0
        x.gsub!("/", "\\")
    end
    return x
end