org.zaproxy.zap.extension.pscan.scanner

Class ScriptsPassiveScanner

java.lang.Object

org.zaproxy.zap.utils.Enableable

org.zaproxy.zap.extension.pscan.PluginPassiveScanner

org.zaproxy.zap.extension.pscan.scanner.ScriptsPassiveScanner

All Implemented Interfaces:

ExampleAlertProvider, PassiveScanner, EnableableInterface

public class ScriptsPassiveScanner
extends PluginPassiveScanner

Nested Class Summary

Nested classes/interfaces inherited from class org.zaproxy.zap.extension.pscan.PluginPassiveScanner

PluginPassiveScanner.AlertBuilder

Constructor Summary

Constructors

Constructor and Description
ScriptsPassiveScanner()

Method Summary

Modifier and Type	Method and Description
void	addTag(String tag) Adds the given tag to the message being passive scanned.
boolean	appliesToHistoryType(int historyType)
String	getName()
int	getPluginId() Returns the ID of the plug-in.
PluginPassiveScanner.AlertBuilder	newAlert() Returns a new alert builder.
void	raiseAlert(int risk, int confidence, String name, String description, String uri, String param, String attack, String otherInfo, String solution, String evidence, int cweId, int wascId, HttpMessage msg) Deprecated. (2.9.0) Use newAlert() to build and raise alerts.
void	raiseAlert(int risk, int confidence, String name, String description, String uri, String param, String attack, String otherInfo, String solution, String evidence, String reference, int cweId, int wascId, HttpMessage msg) Deprecated. (2.9.0) Use newAlert() to build and raise alerts.
void	scanHttpResponseReceive(HttpMessage msg, int id, net.htmlparser.jericho.Source source)

Methods inherited from class org.zaproxy.zap.extension.pscan.PluginPassiveScanner

getAlertTags, getAlertThreshold, getAlertThreshold, getConfig, getDefaultHistoryTypes, getExampleAlerts, getHelper, getLevel, getLevel, getStatus, loadFrom, save, saveTo, setAlertThreshold, setConfig, setDefaultAlertThreshold, setDefaultLevel, setLevel, setParent, setStatus

Methods inherited from class org.zaproxy.zap.utils.Enableable

equals, hashCode, isEnabled, setEnabled

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.zaproxy.zap.extension.pscan.PassiveScanner

isEnabled, scanHttpRequestSend, setEnabled

Constructor Detail

ScriptsPassiveScanner

public ScriptsPassiveScanner()

Method Detail

getName

public String getName()

getPluginId

public int getPluginId()

Description copied from class: PluginPassiveScanner

Returns the ID of the plug-in.

Overrides:

getPluginId in class PluginPassiveScanner

Returns:

the id of the plug-in.

scanHttpResponseReceive

public void scanHttpResponseReceive(HttpMessage msg,
                                    int id,
                                    net.htmlparser.jericho.Source source)

newAlert

public PluginPassiveScanner.AlertBuilder newAlert()

Description copied from class: PluginPassiveScanner

Returns a new alert builder.

By default the alert builder sets the following fields of the alert:

• Plugin ID - using PluginPassiveScanner.getPluginId()
• Name - using PassiveScanner.getName()
• Message - the message being scanned
• URI - from the alert message
• Alert Tags - using PluginPassiveScanner.getAlertTags()

Overrides:

newAlert in class PluginPassiveScanner

Returns:

the alert builder.

Since:

2.9.0

raiseAlert

@Deprecated
public void raiseAlert(int risk,
                                   int confidence,
                                   String name,
                                   String description,
                                   String uri,
                                   String param,
                                   String attack,
                                   String otherInfo,
                                   String solution,
                                   String evidence,
                                   int cweId,
                                   int wascId,
                                   HttpMessage msg)

Deprecated. (2.9.0) Use newAlert() to build and raise alerts.

raiseAlert

@Deprecated
public void raiseAlert(int risk,
                                   int confidence,
                                   String name,
                                   String description,
                                   String uri,
                                   String param,
                                   String attack,
                                   String otherInfo,
                                   String solution,
                                   String evidence,
                                   String reference,
                                   int cweId,
                                   int wascId,
                                   HttpMessage msg)

Deprecated. (2.9.0) Use newAlert() to build and raise alerts.

addTag

public void addTag(String tag)

Description copied from class: PluginPassiveScanner

Adds the given tag to the message being passive scanned.

Overrides:

addTag in class PluginPassiveScanner

Parameters:

tag - the name of the tag.

appliesToHistoryType

public boolean appliesToHistoryType(int historyType)

Specified by:

appliesToHistoryType in interface PassiveScanner

Overrides:

appliesToHistoryType in class PluginPassiveScanner