suspect_transform

package
v0.4.8 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 18, 2026 License: MIT Imports: 11 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	ModuleID    = "suspect-transform"
	ModuleName  = "Suspect Transform Detection"
	ModuleShort = "Detects expression evaluation, quote consumption, unicode transformations"
)

Variables

View Source 
var (
	ModuleDesc = `` /* 695-byte string literal not displayed */

	ModuleConfirmation = "Indicated when injected expressions are evaluated, quotes are consumed, or unicode characters are normalized by the server"
	ModuleSeverity     = severity.Suspect
	ModuleConfidence   = severity.Firm
	ModuleTags         = []string{"behavior-analysis", "injection", "heavy"}
)

Functions

This section is empty.

Types

type Check 

type Check struct {
	Name     string
	GetProbe func() (probe string, expects []string)
	Links    []string
}

Check represents a single transformation detection check.

type Module 

type Module struct {
	modkit.BaseActiveModule
	// contains filtered or unexported fields
}

Module detects suspicious input transformations that may indicate vulnerabilities.

func New 

func New() *Module

New creates a new SuspectTransform module.

func (*Module) ScanPerInsertionPoint 

func (m *Module) ScanPerInsertionPoint(
	ctx *httpmsg.HttpRequestResponse,
	ip httpmsg.InsertionPoint,
	httpClient *http.Requester,
	scanCtx *modkit.ScanContext,
) ([]*output.ResultEvent, error)

ScanPerInsertionPoint tests a single insertion point for suspicious transformations.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.