Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "drupal-misconfig" ModuleName = "Drupal Misconfiguration" ModuleShort = "Detects exposed Drupal configuration files, update scripts, installer, debug settings, and directory listings" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 704-byte string literal not displayed */ ModuleConfirmation = "Confirmed when probed Drupal files return 200 with expected content markers" ModuleSeverity = severity.High ModuleConfidence = severity.Firm ModuleTags = []string{"drupal", "php", "misconfiguration", "info-disclosure", "moderate"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BaseActiveModule
// contains filtered or unexported fields
}
Module implements the Drupal Misconfiguration active scanner.
func (*Module) CanProcess ¶
func (m *Module) CanProcess(ctx *httpmsg.HttpRequestResponse) bool
CanProcess returns true if the request has a response (host is live).
func (*Module) IncludesBaseCanProcess ¶
IncludesBaseCanProcess returns false to bypass default URL/media/method checks.
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest( ctx *httpmsg.HttpRequestResponse, httpClient *http.Requester, scanCtx *modkit.ScanContext, ) ([]*output.ResultEvent, error)
ScanPerRequest probes the host for Drupal-specific misconfiguration files.
Source Files
Click to show internal directories.
Click to hide internal directories.