Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "django-debug-exposure" ModuleName = "Django Debug Exposure" ModuleShort = "Triggers errors to detect Django DEBUG=True information disclosure" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 667-byte string literal not displayed */ ModuleConfirmation = "Confirmed when error responses contain Django debug page markers indicating DEBUG=True" ModuleSeverity = severity.High ModuleConfidence = severity.Firm ModuleTags = []string{"django", "python", "misconfiguration", "info-disclosure", "moderate"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BaseActiveModule
// contains filtered or unexported fields
}
Module implements the Django Debug Exposure active scanner.
func (*Module) CanProcess ¶
func (m *Module) CanProcess(ctx *httpmsg.HttpRequestResponse) bool
func (*Module) IncludesBaseCanProcess ¶
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest( ctx *httpmsg.HttpRequestResponse, httpClient *http.Requester, scanCtx *modkit.ScanContext, ) ([]*output.ResultEvent, error)
ScanPerRequest probes the host for Django DEBUG=True information disclosure.
Source Files
Click to show internal directories.
Click to hide internal directories.