library/src/exploitation/WebExploitation/BP-WebExploitation.cc
// prints out a representation of the Application engine list
prints out a representation of the Application engine list
prints out a representation of the Application engine list
void BP_PrintAppEngineResultList(P_BP_WEB_ASSESSMENT assessment)
{
	if (!assessment)
		return;
	P_BP_WEB_APPSERVER_TEST_RESULT inList = assessment->appErrorResults;
	if (!inList)
		return;
	size_t x = 0;
	for
	(
		inList = inList->first;
		inList;
		inList = inList->next
	)
	{
		printf("\n\t\t[+] App Engine Result %p", inList);
		printf("\n\t\tAppEngine Target Type: %u", inList->targetType);
		if (inList->anchor)
		{
			printf("\n\t\tAnchor Test: %s", inList->anchorActualTest);
			printf("\n\t\tAnchor Pointer: %p", inList->anchor);
			printf("\n\t\tAnchor Var Pointer: %p", inList->vulnVar);
			printf("\n\t\tAnchor Var Position: %u", inList->anchorVarPosition);
		}
		if (inList->form) {
			printf("\n\t\tAnchor Test: %s", inList->actualInputTest);
			printf("\n\t\tAnchor Pointer: %p", inList->form);
			printf("\n\t\tAnchor Var Pointer: %p", inList->input);
			printf("\n\t\tAnchor Var Position: %u", inList->inputPosition);
		}
		printf("\n\t\tEngines Detected: ");
		for (x = 0; x < inList->engineDetectionCount; x++)
			printf("%u, ", inList->enginesDetected[x]);
		printf("\n\t\tPHP Detections: ");
		for (x = 0; x < inList->phpTestMatchesMade; x++)
			printf("%u, ", inList->phpTestMatchIndexes[x]);
		printf("\n\t\tASP Detections: ");
		for (x = 0; x < inList->aspTestMatchesMade; x++)
			printf("%u, ", inList->aspTestMatchIndexes[x]);
		printf("\n\t\tJSP Detections: ");
		for (x = 0; x < inList->jspTestMatchesMade; x++)
			printf("%u, ", inList->jspTestMatchIndexes[x]);
		printf("\n\t\tCFM Detections: ");
		for (x = 0; x < inList->cfmTestMatchesMade; x++)
			printf("%u, ", inList->cfmTestMatchIndexes[x]);
		printf("\n\t\t.NET Detections: ");
		for (x = 0; x < inList->dnetTestMatchesMade; x++)
			printf("%u, ", inList->dnetTestMatchIndexes[x]);
	}
}
void BP_PrintAppEngineResultList ( P_BP_WEB_ASSESSMENT assessment ) { if ( ! assessment ) return ; P_BP_WEB_APPSERVER_TEST_RESULT inList = assessment -> appErrorResults ; if ( ! inList ) return ; size_t x = 0 ; for ( inList = inList -> first ; inList ; inList = inList -> next ) { printf ( " \n \t \t " , inList ) ; printf ( " \n \t \t " , inList -> targetType ) ; if ( inList -> anchor ) { printf ( " \n \t \t " , inList -> anchorActualTest ) ; printf ( " \n \t \t " , inList -> anchor ) ; printf ( " \n \t \t " , inList -> vulnVar ) ; printf ( " \n \t \t " , inList -> anchorVarPosition ) ; } if ( inList -> form ) { printf ( " \n \t \t " , inList -> actualInputTest ) ; printf ( " \n \t \t " , inList -> form ) ; printf ( " \n \t \t " , inList -> input ) ; printf ( " \n \t \t " , inList -> inputPosition ) ; } printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> engineDetectionCount ; x ++ ) printf ( " " , inList -> enginesDetected [ x ] ) ; printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> phpTestMatchesMade ; x ++ ) printf ( " " , inList -> phpTestMatchIndexes [ x ] ) ; printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> aspTestMatchesMade ; x ++ ) printf ( " " , inList -> aspTestMatchIndexes [ x ] ) ; printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> jspTestMatchesMade ; x ++ ) printf ( " " , inList -> jspTestMatchIndexes [ x ] ) ; printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> cfmTestMatchesMade ; x ++ ) printf ( " " , inList -> cfmTestMatchIndexes [ x ] ) ; printf ( " \n \t \t " ) ; for ( x = 0 ; x < inList -> dnetTestMatchesMade ; x ++ ) printf ( " " , inList -> dnetTestMatchIndexes [ x ] ) ; } }
prints out a representation of the Application engine list
prints out a representation of the Application engine list
// null check on assessment // Get results pointer from structure and check results pointer // list iterator // walk the list printing out structure values // target type (anchor, form, or cookie) // --- ANCHORS ------------------------ // --- FORMS ------------------------------- // Appserver engine detection based around alert // PHP engine detection based around alert // ASP engine detection based around alert // JSP engine detection based around alert // CFM engine detection based around alert // .NET engine detection based around alert