Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "wasm-module-detect" ModuleName = "WebAssembly Module Detect" ModuleShort = "Detects WebAssembly modules and WASM instantiation in HTTP responses" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 729-byte string literal not displayed */ ModuleConfirmation = "Confirmed when response contains WASM magic bytes, application/wasm content type, or WebAssembly instantiation calls" ModuleSeverity = severity.Info ModuleConfidence = severity.Certain ModuleTags = []string{"javascript", "fingerprint", "light"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BasePassiveModule
// contains filtered or unexported fields
}
Module implements the WebAssembly Module Detect passive scanner.
func (*Module) CanProcess ¶
func (m *Module) CanProcess(ctx *httpmsg.HttpRequestResponse) bool
CanProcess accepts WASM files (by extension or content type) and JS files (to detect WebAssembly instantiation calls).
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, scanCtx *modkit.ScanContext) ([]*output.ResultEvent, error)
ScanPerRequest analyzes responses for WebAssembly indicators.
Click to show internal directories.
Click to hide internal directories.