Module Expr Str Import alias ImportFrom alias alias ImportFrom alias alias ImportFrom alias Assign NameStore ListLoad Str Str Str Str FunctionDef arguments args NameParam NameParam defaults Str body Assign NameStore Dict Str Str Str Str Str Str Str Str Str Num Num Num Num Num Num Num Num Num If BoolOpOr CompareIn Str NameLoad CompareIn Str NameLoad body Return Num If CompareIn Str NameLoad body Return Num For NameStore NameLoad body If CompareGt Call AttributeLoad NameLoad attr NameLoad Num body Return SubscriptLoad NameLoad Index NameLoad Return Num decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam defaults Num body Assign NameStore BinOpMod Str TupleLoad SubscriptLoad NameLoad Index NameLoad NameLoad NameLoad NameLoad Call NameLoad NameLoad NameLoad If CompareIn NameLoad TupleLoad Str Str body Assign NameStore BinOpAdd BinOpAdd BinOpAdd BinOpAdd NameLoad Str NameLoad Str Call NameLoad Call NameLoad NameLoad AugAssignAdd NameStore BinOpMod Str NameLoad AugAssignAdd NameStore Str Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam defaults Dict body Assign NameStore BinOpMod Str TupleLoad SubscriptLoad NameLoad Index NameLoad NameLoad NameLoad NameLoad If CompareIn NameLoad TupleLoad Str Str body Assign NameStore BinOpAdd BinOpAdd NameLoad Str NameLoad AugAssignAdd NameStore BinOpMod Str NameLoad orelse AugAssignAdd NameStore Str For NameStore NameLoad body AugAssignAdd NameStore BinOpMod Str TupleLoad NameLoad SubscriptLoad NameLoad Index NameLoad AugAssignAdd NameStore Str AugAssignAdd NameStore Str Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body If CompareEq Call NameLoad NameLoad Num body Expr Yield ListLoad SubscriptLoad NameLoad Index Num orelse If CompareGtE Call NameLoad NameLoad Num body Assign TupleStore NameStore NameStore TupleLoad SubscriptLoad NameLoad Slice Num Num SubscriptLoad NameLoad Slice Num For NameStore Call NameLoad NameLoad body For NameStore Call NameLoad BinOpAdd Call NameLoad NameLoad Num body Expr Yield BinOpAdd BinOpAdd SubscriptLoad NameLoad Slice NameLoad NameLoad SubscriptLoad NameLoad Slice NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body Assign NameStore Call NameLoad Str Str Expr Call AttributeLoad NameLoad attr Str For NameStore Call AttributeLoad NameLoad attr body If Call NameLoad SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body Print Str NameLoad For NameStore SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body For NameStore NameLoad body For NameStore SubscriptLoad NameLoad Index NameLoad body Assign NameStore Call NameLoad NameLoad NameLoad NameLoad If CompareNotEq NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad If CompareGt NameLoad Num body Expr Call AttributeLoad NameLoad attr Call NameLoad NameLoad NameLoad NameLoad Str NameLoad NameLoad If CompareGt Call NameLoad Call AttributeLoad SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str attr Num body For NameStore NameLoad body For NameStore SubscriptLoad NameLoad Index NameLoad body Assign NameStore Str For NameStore SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body AugAssignAdd NameStore BinOpMod Str TupleLoad NameLoad Call NameLoad Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad NameLoad If CompareNotEq NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad If CompareGt NameLoad Num body Expr Call AttributeLoad NameLoad attr Call NameLoad NameLoad NameLoad Str NameLoad NameLoad If Call NameLoad SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body Print Str NameLoad For NameStore SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body For NameStore NameLoad body For NameStore SubscriptLoad NameLoad Index NameLoad body Assign NameStore Call NameLoad NameLoad NameLoad NameLoad If CompareNotEq NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad If CompareGt NameLoad Num body Expr Call AttributeLoad NameLoad attr Call NameLoad NameLoad NameLoad NameLoad Str NameLoad NameLoad If CompareGt Call NameLoad Call AttributeLoad SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str attr Num body For NameStore NameLoad body For NameStore SubscriptLoad NameLoad Index NameLoad body Assign NameStore Dict For NameStore SubscriptLoad SubscriptLoad NameLoad Index NameLoad Index Str body Assign SubscriptStore NameLoad Index NameLoad Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad NameLoad If CompareNotEq NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad If CompareGt NameLoad Num body Expr Call AttributeLoad NameLoad attr Call NameLoad NameLoad NameLoad Str NameLoad NameLoad NameLoad Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Return Str decorator_list
N/A N/A 
	File Inclusion Module for Grabber v0.1
	Copyright (C) 2006 - Romain Gaucher - http://rgaucher.info
 N/A sys grabber getContent_POST getContent_GET grabber getContentDirectURL_GET getContentDirectURL_POST grabber single_urlencode N/A severity N/A None Low Medium High detect_file N/A N/A output url_get N/A http://localhost/?param=false N/A N/A listWords N/A root:x:0:0 [boot loader] <title>Google</title> java.io.FileNotFoundException: fread() include_path Failed opening required file(" file_get_contents(" 3 1 3 1 1 1 1 1 1 N/A N/A N/A 404 output N/A 403 output N/A N/A 0 N/A N/A 500 output N/A N/A 1 N/A wrd listWords N/A N/A N/A N/A N/A output count wrd 0 N/A N/A N/A listWords N/A wrd N/A 0 N/A generateOutput N/A N/A url gParam instance method type severityNum N/A 1 N/A N/A astr N/A <file>
	<severity>%s</severity>
	<method>%s</method>
	<url>%s</url>
	<parameter name='%s'>%s</parameter>
	<type name='Files Injection Type'>%s</type> N/A N/A severity N/A severityNum method url gParam N/A str instance type N/A N/A method N/A get GET N/A N/A p N/A N/A N/A N/A url ? gParam = N/A single_urlencode N/A str instance N/A astr N/A 
	<result>%s</result> p N/A astr 
</file>
 N/A astr N/A generateOutputLong N/A N/A url urlString method type severityNum allParams N/A N/A N/A N/A astr N/A <file>
	<severity>%s</severity>
	<method>%s</method>
	<url>%s</url>
	<type name='Files Injection Type'>%s</type> N/A N/A severity N/A severityNum method url type N/A N/A method N/A get GET N/A N/A p N/A N/A url ? urlString N/A astr N/A 
	<result>%s</result> p N/A N/A astr 
	<parameters> N/A k allParams N/A N/A astr N/A 
		<parameter name='%s'>%s</parameter> N/A k N/A allParams N/A k N/A astr 
	</parameters> N/A astr 
</file>
 N/A astr N/A permutations N/A N/A L N/A N/A N/A N/A N/A len L 1 N/A N/A N/A N/A N/A L N/A 0 N/A N/A N/A N/A len L 2 N/A N/A N/A a b N/A N/A L N/A 0 1 N/A L N/A 1 N/A p N/A permutations b N/A N/A i N/A range N/A N/A len p 1 N/A N/A N/A N/A N/A N/A b N/A i a N/A b N/A i N/A process N/A N/A url database attack_list N/A N/A N/A plop N/A open results/files_GrabberAttacks.xml w N/A N/A N/A plop write <filesAttacks>
 N/A u N/A N/A database keys N/A N/A N/A len N/A N/A database N/A u N/A GET N/A N/A Method = GET  u N/A gParam N/A N/A database N/A u N/A GET N/A N/A typeOfInjection attack_list N/A N/A instance N/A attack_list N/A typeOfInjection N/A N/A handle N/A getContent_GET u gParam instance N/A N/A handle None N/A N/A output N/A N/A handle read N/A header N/A N/A handle info N/A k N/A detect_file output N/A N/A k 0 N/A N/A N/A N/A plop write N/A generateOutput u gParam instance GET typeOfInjection k N/A N/A N/A len N/A N/A N/A N/A database N/A u N/A GET keys 1 N/A N/A typeOfInjection attack_list N/A N/A instance N/A attack_list N/A typeOfInjection N/A N/A url N/A gParam N/A N/A database N/A u N/A GET N/A N/A url N/A %s=%s& N/A gParam N/A single_urlencode N/A str instance N/A handle N/A getContentDirectURL_GET u url N/A N/A handle None N/A N/A output N/A N/A handle read N/A k N/A detect_file output N/A N/A k 0 N/A N/A N/A N/A plop write N/A generateOutputLong u url GET typeOfInjection k N/A N/A len N/A N/A database N/A u N/A POST N/A N/A Method = POST  u N/A gParam N/A N/A database N/A u N/A POST N/A N/A typeOfInjection attack_list N/A N/A instance N/A attack_list N/A typeOfInjection N/A N/A handle N/A getContent_POST u gParam instance N/A N/A handle None N/A N/A output N/A N/A handle read N/A header N/A N/A handle info N/A k N/A detect_file output N/A N/A k 0 N/A N/A N/A N/A plop write N/A generateOutput u gParam instance POST typeOfInjection k N/A N/A N/A len N/A N/A N/A N/A database N/A u N/A POST keys 1 N/A N/A typeOfInjection attack_list N/A N/A instance N/A attack_list N/A typeOfInjection N/A N/A allParams N/A N/A gParam N/A N/A database N/A u N/A POST N/A N/A N/A allParams N/A gParam N/A str instance N/A handle N/A getContentDirectURL_POST u allParams N/A N/A handle None N/A N/A output N/A N/A handle read N/A k N/A detect_file output N/A N/A k 0 N/A N/A N/A N/A plop write N/A generateOutputLong u url POST typeOfInjection k allParams N/A N/A N/A plop write 
</filesAttacks> N/A N/A N/A plop close N/A N/A