search

proabiral / inception

A highly configurable Framework for easy automated web scanning
364 stars 65 forks source link

Suggestion: mime type detection #5

Closed random-robbie closed 5 years ago

random-robbie commented 5 years ago

is it possible to add a check for a mime type?

i've had a few ideas and think this would allow to detect a few things like zip/tar etc

proabiral commented 5 years ago

Yes, it is possible to detect mime type. You will need to check for content-type header in response header.

Generated provider.json will contain something like "checkFor": "content-type: text/javascript; charset=UTF-8"

random-robbie commented 5 years ago 
{
        "vulnerability": ".DS_Store",
        "sendIn": "url",
        "color": "yellow",
        "payload": [
            "/.DS_Store"
        ],
        "checkIn": "responseHeader",
        "checkFor": "Content-Type: binary/octet-stream"
    }

will do some testing