Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "wp-rest-api-detect" ModuleName = "WordPress REST API Exposure" ModuleShort = "Detects exposed WordPress REST API namespaces and sensitive endpoints" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 734-byte string literal not displayed */ ModuleConfirmation = "Confirmed when REST API responses contain namespace listings or user data accessible without authentication" ModuleSeverity = severity.Low ModuleConfidence = severity.Certain ModuleTags = []string{"wordpress", "cms", "php", "api", "light"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BasePassiveModule
// contains filtered or unexported fields
}
func (*Module) ScanPerRequest ¶
func (m *Module) ScanPerRequest(ctx *httpmsg.HttpRequestResponse, scanCtx *modkit.ScanContext) ([]*output.ResultEvent, error)
Click to show internal directories.
Click to hide internal directories.