whs-authz-authn/caido-plugin-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

What's happening!!

Browse source
This commit is contained in:
imnyang 2025-05-25 16:59:51 +09:00
commit 12f635c77b
6 changed files with 617 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
packages/backend/src/index.ts
View file

@ -2,11 +2,13 @@ import type { SDK, DefineAPI } from "caido:plugin";
import type { Request } from "caido:utils";
import { ImplicitGrantController } from "./controller/implictGrant";
import { AuthZCodeGrantController } from "./controller/authZCodeGrant";
import { PKCEDowngradeCheck } from "./controller/PKCEDowngradeCheck";
export type API = DefineAPI<{}>;
const implicitGrantController = new ImplicitGrantController();
const authZCodeGrantController = new AuthZCodeGrantController();
const pkceDowngradeCheck = new PKCEDowngradeCheck();
// function matchSSORequest(req: Request): boolean {
// const raw = req.getRaw().toString();
@ -33,6 +35,8 @@ export function init(sdk: SDK<API>) {
implicitGrantController.testReq(req);
if (result) {
await pkceDowngradeCheck.test(sdk, req);
await sdk.findings.create({
title: "Possible SSO Request Detected",
description: `SSO-related parameters detected in request:\n\n${req.getMethod()} ${req.getUrl()} : ${result}`,
@ -40,5 +44,6 @@ export function init(sdk: SDK<API>) {
reporter: "",
});
}
});
}