This commit is contained in:
imnyang 2025-06-05 21:49:59 +09:00
commit 1e79dcabaa
No known key found for this signature in database
GPG key ID: 356406A02D4AFA55
4 changed files with 33 additions and 1 deletions

View file

@ -135,6 +135,6 @@ export class PKCECheck {
request: req, request: req,
reporter: "PKCE Checker", reporter: "PKCE Checker",
}); });
sendReport(sdk, fullTitle, `${message} (${url})`, req, "PKCE Checker"); await sendReport(sdk, fullTitle, `${message} (${url})`, req, "PKCE Checker");
} }
} }

View file

@ -1,5 +1,6 @@
import type { Request, Response } from "caido:utils"; import type { Request, Response } from "caido:utils";
import type { SDK, DefineAPI } from "caido:plugin"; import type { SDK, DefineAPI } from "caido:plugin";
import { sendReport } from "../utils/controlTower";
// 토큰 누출 검사 결과를 담는 구조 // 토큰 누출 검사 결과를 담는 구조
export interface TokenLeakResult { export interface TokenLeakResult {
@ -21,6 +22,13 @@ export class AccessTokenLeakController {
request, request,
reporter: "AccessTokenLeak", reporter: "AccessTokenLeak",
}); });
await sendReport(
sdk,
result.title,
result.description,
request,
"AccessTokenLeak"
);
} }
} }
@ -33,6 +41,13 @@ export class AccessTokenLeakController {
request, request,
reporter: "AccessTokenLeak", reporter: "AccessTokenLeak",
}); });
await sendReport(
sdk,
result.title,
result.description,
request,
"AccessTokenLeak"
);
} }
} }

View file

@ -1,6 +1,7 @@
import type { Request, Response } from "caido:utils"; import type { Request, Response } from "caido:utils";
import type { SDK, DefineAPI } from "caido:plugin"; import type { SDK, DefineAPI } from "caido:plugin";
import { HttpUtils } from "../utils/http"; import { HttpUtils } from "../utils/http";
import { sendReport } from "../utils/controlTower";
const httpUtils = new HttpUtils(); const httpUtils = new HttpUtils();
@ -269,6 +270,14 @@ export class CsrfCheck {
request, request,
reporter: "csrf reporter", reporter: "csrf reporter",
}); });
await sendReport(
sdk,
"CSRF Vulnerability Detected",
`A CSRF vulnerability was detected in the request.\n\nRequest: ${request.getMethod()} ${request.getUrl()}\n\nDetails: ${result}`,
request,
"csrf reporter"
);
} }
} catch (error) { } catch (error) {
sdk.console.error(`Error creating finding: ${error}`); sdk.console.error(`Error creating finding: ${error}`);

View file

@ -1,5 +1,6 @@
import type { Request, Response } from "caido:utils"; import type { Request, Response } from "caido:utils";
import type { SDK } from "caido:plugin"; import type { SDK } from "caido:plugin";
import { sendReport } from "../utils/controlTower";
export class RedirectBypassController { export class RedirectBypassController {
// redirect_uri를 확인하는 함수 // redirect_uri를 확인하는 함수
@ -54,6 +55,13 @@ export class RedirectBypassController {
request: req, request: req,
reporter: "gyu", reporter: "gyu",
}); });
await sendReport(
sdk,
"Redirect URI Bypass Detected",
`A redirect URI bypass was detected.\nRedirect URI: ${result.redirectUri}`,
req,
"gyu"
);
} }
} }
} }