Skip to content

Commit

Permalink
Cosmetic
Browse files Browse the repository at this point in the history
  • Loading branch information
andresriancho committed Apr 1, 2019
1 parent b6d0f30 commit d643793
Showing 1 changed file with 5 additions and 7 deletions.
12 changes: 5 additions & 7 deletions w3af/plugins/evasion/mod_security.py
Original file line number Diff line number Diff line change
Expand Up @@ -32,10 +32,6 @@ class mod_security(EvasionPlugin):
:author: Francisco Amato ( famato |at| infobyte.com.ar )
"""

def __init__(self):
EvasionPlugin.__init__(self)

def modify_request(self, request):
"""
Mangles the request
Expand Down Expand Up @@ -78,12 +74,14 @@ def get_long_desc(self):
:return: A DETAILED description of the plugin functions and features.
"""
return """
This evasion plugin performs a bypass for mod_security version 2.1.0 or less here:
This evasion plugin performs a bypass for mod_security version 2.1.0.
More information about the vulnerability can be found at:
- http://www.php-security.org/MOPB/BONUS-12-2007.html
Important: The evasion only works for postdata.
Example:
Post-data Input: 'a=b'
Post-data Output : '\\x00a=b'
Input post-data: 'a=b'
Output post-data: '\\x00a=b'
"""

0 comments on commit d643793

Please sign in to comment.