Open 1d3df9903ad opened 5 years ago
I see similar errors when I run audit.os_commanding
and audit.os_commanding
plugins for API endpoints:
A "ValueError" exception was found while running audit.os_commanding on "Method: GET |
https://domain/api/sessions/MTgwNTEwNjE2NzQ5MjQ4MDk4NToxOTg0". The exception was: "Invalid
header value '\ntype %SYSTEMROOT%\\win.ini'" at /usr/lib/python2.7/httplib.py:putheader()():1035.
The scan will continue but some vulnerabilities might not be identified.
A "ValueError" exception was found while running audit.response_splitting on "Method: GET |
https://domain/api/sessions/MTgwNTEwNjE2NzQ5MjQ4MDk4NToxOTg0". The exception was: "Invalid
header value 'w3af\r\nvulnerable073b: ae5cw3af'" at /usr/lib/python2.7/httplib.py:putheader()():1035.
The scan will continue but some vulnerabilities might not be identified.
No user description was provided for this bug report given that it was related to handled exceptions in scan with id 2e2cd61579
Version Information
Traceback
Enabled Plugins