Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Merge requests
  • !264

Added references & remedy_guidance to various modules. A new plugin

  • Review changes

  • Download
  • Email patches
  • Plain diff
Closed Administrator requested to merge github/fork/sunilkr/devel into experimental Aug 07, 2012
  • Overview 4
  • Commits 9
  • Pipelines 0
  • Changes 22

Created by: sunilkr

Hi,

  1. I have added references and remedy_guidance to many modules which were missing these values. I know they are not standard but might be useful.
  2. I created a new AutoLogin2 plugin with a slight modification to orginal AutoLogin with some heuristic. Problem: System which submits the scan does not know the exact parameter names sent with the request. Solution: For all forms in page Check if there is <input type='text'...> with name that matches [(id)|(login)....] Count the number of password fields. if there is a field with matching name and there is just one password field, most probably it is the login form. Break the loop. Get the actual name of fields, set the user provided values and merge with @params and submit form.

There is no rspec test yet. Live testing is done.

Would be glad if you merge/update it. Please provide feedback.

Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: github/fork/sunilkr/devel