search

augustd / burp-suite-error-message-checks

Burp Suite extension to passively scan for applications revealing server error messages
64 stars 23 forks source link

Detection enhancement. #22

Closed notoriousturtle closed 6 years ago

notoriousturtle commented 7 years ago

It detects the following as an error message, from a .js file:

dispatchException: funct

augustd commented 6 years ago

Is this a false positive? Which regex was matched?

notoriousturtle commented 6 years ago

yes, false positive.

augustd commented 6 years ago

I've updated the unit tests with better (i.e. some) detection for false positives. Can you please reply with some more context about the false positive you found? A few lines of the script should be enough.

augustd commented 6 years ago

Determined that this was matching one of the ASP.net detection patterns. Modified the pattern to be more specific and performant.