Class: Watobo::Modules::Active::Sap::Its_service_parameter

Inherits:
ActiveCheck
  • Object
show all
Defined in:
modules/active/sap/its_service_parameter.rb

Constant Summary

Constants included from Constants

Constants::AC_GROUP_APACHE, Constants::AC_GROUP_DOMINO, Constants::AC_GROUP_ENUMERATION, Constants::AC_GROUP_FILE_INCLUSION, Constants::AC_GROUP_FLASH, Constants::AC_GROUP_GENERIC, Constants::AC_GROUP_JBOSS, Constants::AC_GROUP_JOOMLA, Constants::AC_GROUP_SAP, Constants::AC_GROUP_SQL, Constants::AC_GROUP_TYPO3, Constants::AC_GROUP_XSS, Constants::AUTH_TYPE_BASIC, Constants::AUTH_TYPE_DIGEST, Constants::AUTH_TYPE_NONE, Constants::AUTH_TYPE_NTLM, Constants::CHAT_SOURCE_AUTO_SCAN, Constants::CHAT_SOURCE_FUZZER, Constants::CHAT_SOURCE_INTERCEPT, Constants::CHAT_SOURCE_MANUAL, Constants::CHAT_SOURCE_MANUAL_SCAN, Constants::CHAT_SOURCE_PROXY, Constants::CHAT_SOURCE_UNDEF, Constants::DEFAULT_PORT_HTTP, Constants::DEFAULT_PORT_HTTPS, Constants::FINDING_TYPE_HINT, Constants::FINDING_TYPE_INFO, Constants::FINDING_TYPE_UNDEFINED, Constants::FINDING_TYPE_VULN, Constants::FIRST_TIME_FILE, Constants::GUI_REGULAR_FONT_SIZE, Constants::GUI_SMALL_FONT_SIZE, Constants::ICON_PATH, Constants::LOG_DEBUG, Constants::LOG_INFO, Constants::SCAN_CANCELED, Constants::SCAN_FINISHED, Constants::SCAN_PAUSED, Constants::SCAN_STARTED, Constants::TE_CHUNKED, Constants::TE_COMPRESS, Constants::TE_DEFLATE, Constants::TE_GZIP, Constants::TE_IDENTITY, Constants::TE_NONE, Constants::VULN_RATING_CRITICAL, Constants::VULN_RATING_HIGH, Constants::VULN_RATING_INFO, Constants::VULN_RATING_LOW, Constants::VULN_RATING_MEDIUM, Constants::VULN_RATING_UNDEFINED

Instance Method Summary collapse

Methods included from CheckInfoMixin::InfoMethods

#check_group, #check_name

Constructor Details

#initialize(project, prefs = {}) ⇒ Its_service_parameter

Returns a new instance of Its_service_parameter.



48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'modules/active/sap/its_service_parameter.rb', line 48

def initialize(project,prefs={})
 
  super(project, prefs)
 
  
  @default_service_parameters = [
  ["~command","AgateInstallCheck"],
  ["~runtimeMode", "DM"], # Development Mode vs PM (Production Mode)
  ["~forcetarget", "sap.com"], # forcetarget only in old (maybe buggy) its-systems supported
  ["~exitURL", "www.sap.com"], # exitURL only in old (maybe buggy) its-systems supported
  ]
  
end

Instance Method Details

#generateChecks(chat) ⇒ Object 



62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
 
# File 'modules/active/sap/its_service_parameter.rb', line 62

def generateChecks(chat)
  
  begin
    
    if chat.request.url.to_s =~ /\/wgate\/(\w*)\/!?/ then
      @default_service_parameters.each do |sp, val|
        checker = proc{
          test_request = nil
          test_response = nil
          test = chat.copyRequest
          service = "#{sp.dup}"
          sparm = "#{val.dup}"
          
          test.add_get_parm(service, sparm)
          
          test_request,test_response = doRequest(test,:default => true)
          
          if test_response.status =~ /200/i then
           # test_chat = Chat.new(test,test_response,chat.id)
            addFinding( test_request,test_response,
            :test_item => chat.request.url,
                       :check_pattern => "#{sparm}",
            :proof_pattern => "#{test_response.status}",
            :chat => chat,
            :title => service
            )
            
          end
          [ test_request, test_response ]
        }
        yield checker
      end            
    end
  rescue => bang
    puts bang
    puts "ERROR!! #{Module.nesting[0].name}"
  end
end