rapid7/metasploit-framework — pull request #177 by m-1-k-3 (2012-02-15 11:33:39+00:00)
Title: new xss and lfi module

Hey guys,

based on the http error SQLi module I have generated two more for detecting basic xss and directory traversal vulnerabilities.

Both modules are reporting to the vuln and notes database:

10.8.28.2 - (Sessions: 0 Jobs: 0)> notes
[*] Time: 2012-02-15 11:17:22 UTC Note: host=192.168.44.22 service=http type=LFI_Vuln data="/arachni/links/rfi.php Location: QUERY Parameter: rfi Value: ../../../../../../../../../../../../etc/passwd Error: daemon: Vuln: Linux LFI"
[*] Time: 2012-02-15 11:22:59 UTC Note: host=192.168.44.22 service=http type=XSS_Vuln data="/pictures/search.php Location: QUERY Parameter: query Value: \"> Error: Vuln: reflective XSS"
10.8.28.2 - (Sessions: 0 Jobs: 0)> vulns
[*] Time: 2012-02-15 11:17:22 UTC Vuln: host=192.168.44.22 port=80 proto=tcp name=auxiliary/scanner/http/lfi_basic_check refs=CWE-98,CWE-22
[*] Time: 2012-02-15 11:22:58 UTC Vuln: host=192.168.44.22 port=80 proto=tcp name=auxiliary/scanner/http/xss_basic_check refs=CWE-79,Cert Advisory-CA-2000-02,URL-http://ha.ckers.org/xss.html

it is quite nice to use it via the crawler module and the wmap plugin.

The problem is that if there are more then one vuln they get overwritten and only the last entry is in the database. Is there a way to prevent the entries from getting overwritten?

thanks and have phun,
mIke