input_behavior_probe

package

v0.4.9 Latest Latest Go to latest Published: Sep 20, 2026 License: MIT Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/vigolium/vigolium

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func ExtractTags(body string) string
type Module
- func New() *Module
- func (m *Module) ScanPerInsertionPoint(ctx *httpmsg.HttpRequestResponse, ip httpmsg.InsertionPoint, ...) ([]*output.ResultEvent, error)
- func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, httpClient *http.Requester, ...) ([]*output.ResultEvent, error)

Constants ¶

View Source

const (
	ModuleID    = "input-behavior-probe"
	ModuleName  = "Input Behavior Probe"
	ModuleShort = "Detects behavior changes from header, path, debug param, and char probing"
)

Variables ¶

View Source

var (
	ModuleDesc = `` /* 708-byte string literal not displayed */

	ModuleConfirmation = "" /* 145-byte string literal not displayed */
	// ModuleSeverity is Info: this diff-based behavior-probing module compares
	// HTML tag structure and status codes against a baseline, which is an
	// inherently noisy, low-confidence triage signal. Findings do not set a
	// per-result severity, so they inherit this declared Info severity (see
	// buildProbeResult in detect.go) and are surfaced as informational leads.
	ModuleSeverity   = severity.Info
	ModuleConfidence = severity.Tentative
	ModuleTags       = []string{"injection", "probe", "heavy"}
)

Functions ¶

func ExtractTags ¶

func ExtractTags(body string) string

ExtractTags extracts all opening HTML tags from response body. Returns concatenated string of tags: "<div<script<a..."

Types ¶

type Module ¶

type Module struct {
	modkit.BaseActiveModule
	// contains filtered or unexported fields
}

func New ¶

func New() *Module

func (*Module) ScanPerInsertionPoint ¶

func (m *Module) ScanPerInsertionPoint(
	ctx *httpmsg.HttpRequestResponse,
	ip httpmsg.InsertionPoint,
	httpClient *http.Requester,
	scanCtx *modkit.ScanContext,
) ([]*output.ResultEvent, error)

ScanPerInsertionPoint tests a single insertion point for HTML structure changes using a polyglot fuzz payload and per-char param fuzzing.

func (*Module) ScanPerRequest ¶

func (m *Module) ScanPerRequest(
	ctx *httpmsg.HttpRequestResponse,
	httpClient *http.Requester,
	scanCtx *modkit.ScanContext,
) ([]*output.ResultEvent, error)

ScanPerRequest probes headers, path manipulations, and debug params once per unique host+path combination.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL