/
bear
/
zaproxy
Обзор
Документация
Войти
/
bear
/
zaproxy
Код
Запросы
0
Пакеты
0
Релизы
0
CI/CD
Аналитика
Безопасность
main
python/scripts/watcher/report-v1.4.0.1.html
72 строки
10 KB
thc202
Normalise line endings
01 июн 2019, 17:26
Не верифицирован
01 июн 2019, 17:26
02b983c
Код
Авторство
О чём код?
<html><head><title>ZAP Wavsep Report</title></head><body> <h1><img src="http://zaproxy.googlecode.com/svn/trunk/src/resource/zap64x64.png" align="middle">OWASP ZAP watcher results</h1> Generated: 2012-07-13 18:27 <h3>Total Score</h3> <font style="BACKGROUND-COLOR: GREEN"> </font><font style="BACKGROUND-COLOR: RED"> </font>26%<br/>Pass: 11<br/>Fail: 31<br/>Total: 42<br/><h3>Detailed Results</h3> <table border="1"> <tr><th>Page</th><th>Result</th><th>Pass</th><th>Fail</th><th>Other</th> <tr><td>Check.Pasv.Asp.Net.ViewState.Mac.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Charset.Mismatch.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Charset.Utf8.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Cookie.HttpOnly.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>HttpOnly </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Cookie.LooselyScoped.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Cookie.Secure.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>InsecureCookie </td><td> </td><td>XFrame CacheControl XContent </td></tr> <tr><td>Check.Pasv.CrossDomain.FormSubmit.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CSRF XContent </td></tr> <tr><td>Check.Pasv.CrossDomain.JavascriptReference.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.CrossDomain.ScriptReference.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>CrossJS </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.CrossDomain.StyleSheetInclusion.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Flash.AllowScriptAccess.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Flash.CrossDomain.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Header.CacheControl.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>CacheControl </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Header.ContentTypeMissing.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>XContent </td><td> </td><td>NoContentHeader </td></tr> <tr><td>Check.Pasv.Header.FrameOptions.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>XFrame </td><td> </td><td>XContent </td></tr> <tr><td>Check.Pasv.Header.IeXssProtection.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame IE8XSSfilter XContent </td></tr> <tr><td>Check.Pasv.Header.InternalIp.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Header.MimeSniff.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>NoContentHeader </td><td> </td><td>XContent </td></tr> <tr><td>Check.Pasv.Header.WeakAuth.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>WeakAuth </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.InformationDisclosure.Comments.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.InformationDisclosure.DatabaseErrors.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>InfoDb </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.InformationDisclosure.DebugErrors.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>InfoDebug </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.InformationDisclosure.InUrl.php</td><td><font style="BACKGROUND-COLOR: GREEN"> PASS </font></td><td>InfoUrl </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.InformationDisclosure.ReferrerLeak.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>InfoUrl XFrame XContent </td></tr> <tr><td>Check.Pasv.Java.ViewState.Uncompressed.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Java.ViewState.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Javascript.DomainLowering.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Javascript.Eval.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.SSL.CertValidation.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CacheControl XContent </td></tr> <tr><td>Check.Pasv.SSL.InsecureFormLoad.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CSRF XContent </td></tr> <tr><td>Check.Pasv.SSL.InsecureFormPost.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CacheControl CSRF XContent </td></tr> <tr><td>Check.Pasv.SSL.StrictTransportSecurity.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CacheControl XContent </td></tr> <tr><td>Check.Pasv.SSL.Version.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CacheControl XContent </td></tr> <tr><td>Check.Pasv.SharePoint.DocLib.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Silverlight.ClientAccessPolicy.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Silverlight.EnableHtmlAccess.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.Unicode.InvalidUTF8.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.UserControlled.Charset.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.UserControlled.Cookie.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> <tr><td>Check.Pasv.UserControlled.HtmlAttributes.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CSRF XContent </td></tr> <tr><td>Check.Pasv.UserControlled.JavascriptEvent.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame CSRF XContent </td></tr> <tr><td>Check.Pasv.UserControlled.JavascriptProperty.php</td><td><font style="BACKGROUND-COLOR: RED"> FAIL </font></td><td> </td><td> </td><td>XFrame XContent </td></tr> </table><br/> <h3>Alerts Key</h3> <table border="1"> <tr><th>Alert</th><th>Description</th> <tr><td>Auto</td><td>Password Autocomplete in browser</td></tr> <tr><td>CSRF</td><td>Cross Site Request Forgery</td></tr> <tr><td>CacheControl</td><td>Incomplete or no cache-control and pragma HTTPHeader set</td></tr> <tr><td>CrossJS</td><td>Cross-domain JavaScript source file inclusion</td></tr> <tr><td>HttpOnly</td><td>Cookie set without HttpOnly flag</td></tr> <tr><td>IE8XSSfilter</td><td>IE8's XSS protection filter not disabled</td></tr> <tr><td>InfoDb</td><td>Information disclosure - database error messages</td></tr> <tr><td>InfoDebug</td><td>Information disclosure - debug error messages</td></tr> <tr><td>InfoUrl</td><td>Information disclosure - sensitive informations in URL</td></tr> <tr><td>InsecureCookie</td><td>Cookie set without secure flag</td></tr> <tr><td>NoContentHeader</td><td>Content-Type header missing</td></tr> <tr><td>SQLfp</td><td>SQL Injection Fingerprinting</td></tr> <tr><td>SQLi</td><td>SQL Injection</td></tr> <tr><td>WeakAuth</td><td>Weak HTTP authentication over an unsecured connection</td></tr> <tr><td>XContent</td><td>X-Content-Type-Options header missing</td></tr> <tr><td>XFrame</td><td>X-Frame-Options header not set</td></tr> <tr><td>XSS</td><td>Cross Site Scripting</td></tr> </table><br/> </body></html>