Method doActiveScan

src/burp/SimpleFuzz.java:18–35

(IHttpRequestResponse basePair, IScannerInsertionPoint insertionPoint)

    }

    @Override
    public List<IScanIssue> doActiveScan(IHttpRequestResponse basePair, IScannerInsertionPoint insertionPoint) {
        List<IScanIssue> issues = new ArrayList<>();

        // Construct the attack payload
        byte[] payload = insertionPoint.buildRequest("a'a\\'b\"c>?>%}}%%>c<[[?${{%}}cake\\".getBytes());

        // Send the attack request
        IHttpRequestResponse attack = callbacks.makeHttpRequest(basePair.getHttpService(), payload);

        // Compare the response
        if (!tagmap(helpers.bytesToString(attack.getResponse())).equals(tagmap(helpers.bytesToString(basePair.getResponse())))) {
            // Launch passive scan if the responses are different
            launchPassiveScan(attack);
        }

        return issues;
    }


}