andresriancho / django-moth Goto Github PK

http://127.0.0.1:8000/audit/xss/simple_xss.py

https://github.com/andresriancho/django-moth/blob/master/moth/views/vulnerabilities/audit/memcache_injection.py

Make sure I can manually navigate through the whole site, issues that we have right now are:

• From home I can't navigate to /grep , this will be fixed by #3
• The URLs for the grep tests are still http://127.0.0.1:8000/event_validation/ and should be http://127.0.0.1:8000/grep/event_validation/
• From the index of page I can't access the test pages, the links are wrong. They should be relative links.

Add link to vulnerability page which shows source code for the django/python web application. Maybe there is a reusable app for this?

There seems to be an issue with my template, when I try to output a large piece of binary (as required for example by the ssh_version payload or the os_commanding attack plugin tests) the output simply "goes missing".

Create dynamic view for plugin families URLs like http://127.0.0.1:8000/grep , http://127.0.0.1:8000/audit , etc.

/g /gr /gre /grep ! They all work 💃

That's an ugly bug which drives w3af's web_spider crazy

Is it possible to download a google font to my project and include them to decorate h1-h6?

{% comment %}
TODO: Add link to top level plugin names
{% comment %}

Make runserver work with SSL, there are many tests which require SSL protocol. Here is a way to achieve it: http://www.ianlewis.org/en/testing-https-djangos-development-server

Most likely I'll have a .sh file that will do all those steps for me.

Define http://127.0.0.1:8000/audit/ pages , they should basically have some type of link to each "test suite".

Back button in index-of page and vulnerable page.

JavaScript show source code

http://127.0.0.1:8000/grep/hash_find/ vs http://127.0.0.1:8000/grep/hash_find bug

Replace RUN git clone https://github.com/andresriancho/django-moth.git with an ADD