Method checkVul

src/main/java/burp/BurpExtender.java:126–153

检测请求的是否满足pauload @param iHttpRequestResponse

(IHttpRequestResponse iHttpRequestResponse)

     * @param iHttpRequestResponse
     */
    public void checkVul(IHttpRequestResponse iHttpRequestResponse) {
        List<String> header = helpers.analyzeRequest(iHttpRequestResponse).getHeaders();
        List<String> result = bulidUrl(iHttpRequestResponse);
        if (result == null) {
            return;
        }
        for (String info : result) {
            header.set(0, info);
            stdout.println(header.get(0));
            byte[] newMessage = helpers.buildHttpMessage(header, null);
            String url = String.valueOf(helpers.analyzeRequest(iHttpRequestResponse.getHttpService(), newMessage).getUrl());

            if (vulTableMode.contiansUrl(url)) {
                continue;
            }

            IHttpRequestResponse resp = this.callbacks.makeHttpRequest(iHttpRequestResponse.getHttpService(), newMessage);
            //判断返回值是否是200
            if (helpers.analyzeResponse(resp.getResponse()).getStatusCode() == 200) {
                //判断返回的内容是否符合POC
                if (isGood(helpers.bytesToString(resp.getResponse()).toLowerCase())) {
                    if (!vulTableMode.contiansUrl(url)) {
                        vulTableMode.addRow(new VulData(url, String.valueOf(helpers.bytesToString(resp.getResponse()).length()), "true", resp));
                    }
                }
            }
        }
    }

    /**
     * 返回请求头的第一行即【GET /xxx/xxx HTTP/1.1】这种