metasploit-framework
https://github.com/rapid7/metasploit-framework
Ruby
Metasploit Framework
Msf::DBManager::Web#report_web_vuln
Report a Web Vuln to the database. WebVuln must be tied to an existing Web Site opts MUST contain +:web_site+:: the web site object that this page should be associated with +:path+:: the virtual host name for this particular web site +:query+:: the query string appended to the path (not valid for GET method flaws) +:method+:: the form method, one of GET, POST, or PATH +:params+:: an ARRAY of all parameters and values specified in the form +:pname+:: the specific field where the vulnerability occurs +:proof+:: the string showing proof of the vulnerability +:risk+:: an INTEGER value from 0 to 5 indicating the risk (5 is highest) +:name+:: the string indicating the type of vulnerability If web_site is NOT specified, the following values are mandatory +:host+:: the ip address of the server hosting the web site +:port+:: the port number of the associated web site +:vhost+:: the virtual host for this particular web site +:ssl+:: whether or not SSL is in use on this port Duplicate records for a given web_site, path, method, pname, and name combination will be overwritten
Edit
git clone [email protected]:rapid7/metasploit-framework.git
cd metasploit-framework
open lib/msf/core/db_manager/web.rb
Contribute
# Make a new branchgit checkout -b -your-name--update-docs-Msf--DBManager--Web-report_web_vuln-for-pr
# Commit to gitgit add lib/msf/core/db_manager/web.rbgit commit -m "better docs for Msf::DBManager::Web#report_web_vuln"
# Open pull requestgem install hub # on a mac you can `brew install hub`
hub fork
git push <your name> -your-name--update-docs-Msf--DBManager--Web-report_web_vuln-for-pr
hub pull-request
# Celebrate!