Project

General

Profile

Feature #119

Allow ThreatScripts to Load Results from a Web Request

Added by Luke Murphey about 14 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Luke Murphey
Category:
-
Target version:
0.9 (Beta)
Start date:
04/16/2010
Due date:
% Done:

100%

Description

Add the ability for ThreatScripts to perform HTTP operations. This feature is useful for gathering additional information from other sites or performing more in-depth analysis (like XSS analysis).

History

#1 Updated by Luke Murphey almost 14 years ago

Some things the module must do:

  • Provide the response including headers, data, response code, etc.
  • Define a timeout
  • Return a result indicating if the data was truncated
  • Set whether forwards are followed (and how many)

#2 Updated by Luke Murphey almost 14 years ago

Below would be an example of how the API should work:

get = GetRequest("http://google.com", HTTP1_1)
get.setTimeLimit(10)
get.setSizeLimit(1024)
get.setFollowForwards(10)

result = get.run()

if( result.sizeLimitReached() || result.timeLimitReached() ){
    //Do nothing since the 
}
else{
    result.getData()
    result.getHeader("Server")
    result.getResponseCode()
}

#3 Updated by Luke Murphey almost 14 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

Implemented in r452.

Also available in: Atom PDF