Merge pull request #13362 from inkz/fix_9635

added ExactDelay object for NodeJS vuln checking #9635
andresriancho · Jan 20, 2016 · e65fc33 · e65fc33
2 parents 87ebb5a + 2488fb2
commit e65fc33
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/w3af/plugins/audit/eval.py b/w3af/plugins/audit/eval.py
@@ -70,7 +70,9 @@ class eval(AuditPlugin):
         # ASP.NET also uses miliseconds
         # http://msdn.microsoft.com/en-us/library/d00bd51t.aspx
         # Note: The Sleep in ASP.NET is uppercase
-        ExactDelay("Thread.Sleep(%s);", mult=1000)
+        ExactDelay("Thread.Sleep(%s);", mult=1000),
+        # NodeJS eval
+        ExactDelay("var cd;var d=new Date();do{cd=new Date();}while(cd-d<%s)", mult=1000)
     )
 
     def __init__(self):