Home → Questions →

Plugint to search for a string ocurence in BODY.

• Edit

Tomas D.

17 Jan, 2017 01:17 PM

Helo,

Question: Is there a plugin that could search for string occurence in BODY and report that string occurence?

Anyway I could develop it by myself if needed, just asking anyway for any TIP or Adivce, where to begin.

Thanks for your advice and thanks for the great work with arachni.

Tomas D.

1. Support Staff 1 Posted by Tasos Laskos on 17 Jan, 2017 01:57 PM

   

   Hello,

   You need to write a check like this one: https://github.com/Arachni/arachni/blob/experimental/components/che...

   You'll just need to change the filename, class name, the info and of course the regexp.

   Cheers

   • Edit

2. 2 Posted by Tomas D. on 17 Jan, 2017 05:51 PM

   

   Helped a lot! Thanks Mr!

   If I could have a second, developer question.:
   -Is there a component example, utilising Arachni::Component::Options?

   My motivation: Maybe after I do some research about Arachni::Component::Options, I could publish a component named "Search String in 'Response-BODY'", to the comunity. I know that component like this, is not directly related to web security, but could be pratcital in some way.

   P.S.: The modularity of arachni is nice thing to play with.

   have a nice day

   • Edit

3. 3 Posted by Tomas D. on 17 Jan, 2017 05:55 PM

   

   And my messy conversation title has to be corrected or deleted:

   "Plugin, to search for a string occurrence in BODY."

   sorry :) did come out unchecked.

   • Edit

4. Support Staff 4 Posted by Tasos Laskos on 18 Jan, 2017 12:12 PM

   

   In that case you'll need to write a plugin rather than a check.
   The closest existing plugin is the page_dump one: https://github.com/Arachni/arachni/blob/experimental/components/plu...

   You'll need to set a similar callback to process each page and page.body and then log your results using the register_results method.

   The format of the results however is completely up to you and if you want those results to be included in the reports (other than the default AFR one), you'll need to add the relevant plugin formatters.

   I'd suggest checking out the existing plugins and their formatters to get a feel for how things work.
   If you don't feel comfortable writing this plugin yourself you can open a feature request on GitHub and I'll add one myself for a future release.

   Cheers

   • Edit

5. Tasos Laskos closed this discussion on 05 Feb, 2017 11:12 AM.