forked from TheGetch/Burp-Suite-Pro-Scan-Profiles
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Medium Scan.json
151 lines (151 loc) · 5.25 KB
/
Medium Scan.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
{
"scanner":{
"audit_optimization":{
"consolidate_passive_issues":true,
"follow_redirections":true,
"maintain_session":true,
"scan_accuracy":"minimise_false_negatives",
"scan_speed":"thorough",
"skip_ineffective_checks":false
},
"error_handling":{
"consecutive_audit_check_failures_to_skip_insertion_point":2,
"consecutive_insertion_point_failures_to_fail_audit_item":2,
"number_of_follow_up_passes":1,
"pause_task_failed_audit_item_count":10,
"pause_task_failed_audit_item_percentage":0
},
"frequently_occurring_insertion_points":{
"quick_scan_body_params":true,
"quick_scan_cookies":true,
"quick_scan_entire_body":true,
"quick_scan_http_headers":true,
"quick_scan_param_name":true,
"quick_scan_url_params":true,
"quick_scan_url_path_filename":true,
"quick_scan_url_path_folders":true
},
"ignored_insertion_points":{
"skip_all_tests_for_parameters":[],
"skip_server_side_injection_for_parameters":[
{
"enabled":true,
"expression":"aspsessionid.*",
"item":"name",
"match_type":"matches_regex",
"parameter":"cookie"
},
{
"enabled":true,
"expression":"asp.net_sessionid",
"item":"name",
"match_type":"is",
"parameter":"cookie"
},
{
"enabled":true,
"expression":"__eventtarget",
"item":"name",
"match_type":"is",
"parameter":"body_parameter"
},
{
"enabled":true,
"expression":"__eventargument",
"item":"name",
"match_type":"is",
"parameter":"body_parameter"
},
{
"enabled":true,
"expression":"__viewstate",
"item":"name",
"match_type":"is",
"parameter":"body_parameter"
},
{
"enabled":true,
"expression":"__eventvalidation",
"item":"name",
"match_type":"is",
"parameter":"body_parameter"
},
{
"enabled":true,
"expression":"jsessionid",
"item":"name",
"match_type":"is",
"parameter":"any_parameter"
},
{
"enabled":true,
"expression":"cfid",
"item":"name",
"match_type":"is",
"parameter":"cookie"
},
{
"enabled":true,
"expression":"cftoken",
"item":"name",
"match_type":"is",
"parameter":"cookie"
},
{
"enabled":true,
"expression":"PHPSESSID",
"item":"name",
"match_type":"is",
"parameter":"cookie"
},
{
"enabled":true,
"expression":"session_id",
"item":"name",
"match_type":"is",
"parameter":"cookie"
}
]
},
"insertion_point_types":{
"insert_body_params":true,
"insert_cookies":true,
"insert_entire_body":true,
"insert_http_headers":true,
"insert_param_name":true,
"insert_url_params":true,
"insert_url_path_filename":true,
"insert_url_path_folders":true
},
"issues_reported":{
"scan_type_intrusive_active":false,
"scan_type_javascript_analysis":true,
"scan_type_light_active":true,
"scan_type_medium_active":true,
"scan_type_passive":true,
"select_individual_issues":false,
"selected_issues":[],
"store_issues_within_queue_items":false
},
"javascript_analysis":{
"fetch_out_of_scope_resources":true,
"max_dynamic_time_per_item":30,
"max_static_time_per_item":30,
"request_missing_dependencies":true,
"use_dynamic_analysis":true,
"use_static_analysis":true
},
"misc_insertion_point_options":{
"max_insertion_points_per_base_request":30,
"use_nested_insertion_points":true
},
"modifying_parameter_locations":{
"body_to_cookie":false,
"body_to_url":false,
"cookie_to_body":false,
"cookie_to_url":false,
"url_to_body":false,
"url_to_cookie":false
}
}
}