serialized_object_detect

package
v0.5.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 3, 2026 License: MIT Imports: 11 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	ModuleID    = "serialized-object-detect"
	ModuleName  = "Serialized Object Detection"
	ModuleShort = "Detects serialized Java/PHP/.NET/Python/Ruby/Node.js objects in request parameters (incl. base64-wrapped)"
)

Variables

View Source 
var (
	ModuleDesc = `` /* 723-byte string literal not displayed */

	ModuleConfirmation = "Confirmed when request parameter values contain known serialization format signatures"
	// The module text says this "confirms an attack surface, not exploitability" —
	// a serialized blob in a request is a precondition/lead, not a confirmed
	// deserialization vuln, so it belongs at Low rather than Medium.
	ModuleSeverity   = severity.Low
	ModuleConfidence = severity.Firm
	ModuleTags       = []string{"deserialization", "light"}
)

Functions

This section is empty.

Types

type Module 

type Module struct {
	modkit.BasePassiveModule
	// contains filtered or unexported fields
}

Module implements the Serialized Object Detection passive scanner.

func New 

func New() *Module

New creates a new Serialized Object Detection module.

func (*Module) ScanPerRequest 

func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, scanCtx *modkit.ScanContext) ([]*output.ResultEvent, error)

ScanPerRequest checks request parameters for serialized object signatures.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.