Method interestingFileScan

src/burp/PerHostScans.java:44–69

(IHttpRequestResponse basePair)

    };

    private List<IScanIssue> interestingFileScan(IHttpRequestResponse basePair) {
        List<IScanIssue> issues = new ArrayList<>();
        for (Object[] mapping : interestingFileMappings) {
            String url = (String) mapping[0];
            String expect = (String) mapping[1];
            String reason = (String) mapping[2];

            IHttpRequestResponse attack = fetchURL(basePair, url);
            if (safeBytesToString(attack.getResponse()).contains(expect)) {
                // prevent false positives by tweaking the URL and confirming the expected string goes away
                IHttpRequestResponse baseline = fetchURL(basePair, url.substring(0, url.length() - 1));
                if (!safeBytesToString(baseline.getResponse()).contains(expect)) {
                    issues.add(new CustomScanIssue(
                            basePair.getHttpService(),
                            Utilities.helpers.analyzeRequest(attack).getUrl(),
                            new IHttpRequestResponse[]{attack, baseline},
                            "Interesting response",
                            "The response to <b>" + htmlEncode(url) + "</b> contains <b>'" + htmlEncode(expect) + "'</b><br/><br/>This may be interesting. Here's a clue why: <b>" + htmlEncode(reason) + "</b>",
                            "Firm",
                            CustomScanIssue.severity.Information
                    ));
                }
            }
        }
        return issues;
    }

    private IHttpRequestResponse fetchURL(IHttpRequestResponse basePair, String url) {
        String path = Utilities.helpers.analyzeRequest(basePair).getUrl().getPath();