Method scan

src/main/java/burp/FastjsonScan.java:187–289

探测依赖扫描模块 @param iHttpRequestResponse @param mode @return

(IHttpRequestResponse iHttpRequestResponse, String mode)

     * @return
     */
    private List<Issus> scan(IHttpRequestResponse iHttpRequestResponse, String mode){
        FindJsons findJsons = new FindJsons(helpers, iHttpRequestResponse);
        String url = helpers.analyzeRequest(iHttpRequestResponse).getUrl().toString();
        String method = helpers.analyzeRequest(iHttpRequestResponse).getMethod();
        String statusCode = String.valueOf(helpers.analyzeResponse(iHttpRequestResponse.getResponse()).getStatusCode());

        String key = null;
        BaseScan baseScan = null;
        int id;
        // 判断数据包中是否存在json，有则加入到tags中
        if (!findJsons.isParamsJson().isFlag()&&!findJsons.isContypeJson().isFlag()) {
            this.tags.getScanQueueTagClass().add(
            method,
            method,
            url,
            statusCode,
            "[×] json not find",
            iHttpRequestResponse);
            return null;
        }
        // 判断数据包中是否存在json，有则加入到tags中
        if (findJsons.isParamsJson().isFlag()) {
            // 先添加任务
            id = this.tags.getScanQueueTagClass().add(
                    method,
                    method,
                    url,
                    statusCode,
                    "find json param.wait for testing.",
                    iHttpRequestResponse);
            key = findJsons.isParamsJson().getKey();
        } else if (findJsons.isContypeJson().isFlag()) {
            // 先添加任务
            id = this.tags.getScanQueueTagClass().add(
                    method,
                    method,
                    url,
                    statusCode,
                    "find json body. wait for testing.",
                    iHttpRequestResponse);
        } else {
            return null;
        }
        try {
            baseScan = ScanFactory.createScan(mode, iHttpRequestResponse, helpers, callbacks,this.tags.getBaseSettingTagClass().isStartBypass(),this.tags.getBaseSettingTagClass().getDnslogName());
        } catch (Exception e) {
            this.stdout.println("================模块实例化异常================");
            this.stdout.println(String.format("异常模块: %s", mode));
            this.stdout.println(e);
            this.stdout.println("========================================");
        }
        if (baseScan == null) {
            return null;
        }

        // 循环调用dnslog，填入payload
        List<Issus> tabIssues = null;
        try {