STRLCPY/param-miner

■ ■ ■ ■ ■ ■

src/burp/BurpExtender.java

		skipped 194 lines
195	195		}
196	196		}
197	197
198		-	class ParamInsertionPoint implements IScannerInsertionPoint {
199		-	byte[] request;
200		-	String name;
201		-	String value;
202		-	byte type;
203		-
204		-	ParamInsertionPoint(byte[] request, String name, String value, byte type) {
205		-	this.request = request;
206		-	this.name = name;
207		-	this.value = value;
208		-	this.type = type;
209		-	}
210		-
211		-	String calculateValue(String unparsed) {
212		-	return unparsed;
213		-	}
214		-
215		-	@Override
216		-	public String getInsertionPointName() {
217		-	return name;
218		-	}
219		-
220		-	@Override
221		-	public String getBaseValue() {
222		-	return value;
223		-	}
224		-
225		-	@Override
226		-	public byte[] buildRequest(byte[] payload) {
227		-	IParameter newParam = Utilities.helpers.buildParameter(name, Utilities.encodeParam(Utilities.helpers.bytesToString(payload)), type);
228		-	return Utilities.helpers.updateParameter(request, newParam);
229		-	}
230		-
231		-	@Override
232		-	public int[] getPayloadOffsets(byte[] payload) {
233		-	//IParameter newParam = Utilities.helpers.buildParameter(name, Utilities.encodeParam(Utilities.helpers.bytesToString(payload)), type);
234		-	return new int[]{0, 0};
235		-	//return new int[]{newParam.getValueStart(), newParam.getValueEnd()};
236		-	}
237		-
238		-	@Override
239		-	public byte getInsertionPointType() {
240		-	return type;
241		-	//return IScannerInsertionPoint.INS_PARAM_BODY;
242		-	// return IScannerInsertionPoint.INS_EXTENSION_PROVIDED;
243		-	}
244		-	}
245		-
246	198		class ParamNameInsertionPoint extends ParamInsertionPoint {
247	199		String attackID;
248	200		String defaultPrefix;
		skipped 348 lines