Skip to content

Commit c9ee043

Browse files
psiinonpsiinon
authored
Merge pull request #15 from kingthorin/fdb-offensive
Add 'attack' folder and components
2 parents e30f8d4 + 3b260f9 commit c9ee043

File tree

156 files changed

+14425
-23
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

156 files changed

+14425
-23
lines changed

‎CHANGELOG.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
66
## [Unreleased]
77
### Changed
88
- Do not set the background colour of the help page.
9+
- Migrated 'attack' directory and components from main FuzzDB add-on, due to anti-virus considerations (Issue 5972).
10+
- Updated from upstream.
911

1012
## [2] - 2020-01-30
1113
### Added
@@ -19,6 +21,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
1921

2022
First version.
2123

22-
[Unreleased]: https://github.com/zaproxy/fuzzdb-web-backdoors/compare/v2...HEAD
23-
[2]: https://github.com/zaproxy/fuzzdb-web-backdoors/compare/v1...v2
24-
[1]: https://github.com/zaproxy/fuzzdb-web-backdoors/releases/v1
24+
[Unreleased]: https://github.com/zaproxy/fuzzdb-offensive/compare/v2...HEAD
25+
[2]: https://github.com/zaproxy/fuzzdb-offensive/compare/v1...v2
26+
[1]: https://github.com/zaproxy/fuzzdb-offensive/releases/v1

‎README.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,3 @@
1-
fuzzdb-web-backdoors
2-
====================
1+
# fuzzdb-offensive
32

4-
A ZAP add-on with [FuzzDB] web backdoors, split from the main FuzzDB add-on to avoid issues with AVs.
5-
6-
[FuzzDB]: https://github.com/fuzzdb-project/fuzzdb/
3+
A ZAP add-on with [FuzzDB](https://github.com/fuzzdb-project/fuzzdb/) web backdoors and attack files, split from the main FuzzDB add-on to avoid issues with anti-virus packages.

‎build.gradle.kts

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ repositories {
2222
}
2323

2424
version = "3"
25-
description = "FuzzDB web backdoors which can be used with the ZAP fuzzer"
25+
description = "FuzzDB web backdoors and attack files which can be used with the ZAP fuzzer or for manual penetration testing"
2626

2727
java {
2828
sourceCompatibility = JavaVersion.VERSION_1_8
@@ -31,17 +31,17 @@ java {
3131

3232
zapAddOn {
3333
addOnId.set(project.name.replace("-", ""))
34-
addOnName.set("FuzzDB Web Backdoors")
34+
addOnName.set("FuzzDB Offensive")
3535
addOnStatus.set(AddOnStatus.RELEASE)
3636
zapVersion.set("2.9.0")
3737

38-
releaseLink.set("https://github.com/zaproxy/fuzzdb-web-backdoors/compare/v@PREVIOUS_VERSION@...v@CURRENT_VERSION@")
39-
unreleasedLink.set("https://github.com/zaproxy/fuzzdb-web-backdoors/compare/v@CURRENT_VERSION@...HEAD")
38+
releaseLink.set("https://github.com/zaproxy/fuzzdb-offensive/compare/v@PREVIOUS_VERSION@...v@CURRENT_VERSION@")
39+
unreleasedLink.set("https://github.com/zaproxy/fuzzdb-offensive/compare/v@CURRENT_VERSION@...HEAD")
4040

4141
manifest {
4242
author.set("ZAP Dev Team")
43-
url.set("https://www.zaproxy.org/docs/desktop/addons/fuzzdb-web-backdoors/")
44-
repo.set("https://github.com/zaproxy/fuzzdb-web-backdoors/")
43+
url.set("https://www.zaproxy.org/docs/desktop/addons/fuzzdb-offensive/")
44+
repo.set("https://github.com/zaproxy/fuzzdb-offensive/")
4545
changesFile.set(tasks.named<ConvertMarkdownToHtml>("generateManifestChanges").flatMap { it.html })
4646

4747
helpSet {

‎settings.gradle.kts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
rootProject.name = "fuzzdb-web-backdoors"
1+
rootProject.name = "fuzzdb-offensive"

‎src/main/javahelp/help/contents/intro.html

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,12 @@
33
<HEAD>
44
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
55
<TITLE>
6-
FuzzDB Web Backdoors
6+
FuzzDB Offensive
77
</TITLE>
88
</HEAD>
99
<BODY>
10-
<H1>FuzzDB Web Backdoors</H1>
11-
<a href="https://github.com/fuzzdb-project/fuzzdb/">FuzzDB</a> web backdoors which can be used with the ZAP fuzzer.
10+
<H1>FuzzDB Offensive</H1>
11+
<a href="https://github.com/fuzzdb-project/fuzzdb/">FuzzDB</a> web backdoors and attack files which can be used with the ZAP fuzzer or for manual penetration testing.
1212

1313
</BODY>
1414
</HTML>

‎src/main/javahelp/help/helpset.hs

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,10 @@
33
PUBLIC "-//Sun Microsystems Inc.//DTD JavaHelp HelpSet Version 2.0//EN"
44
"http://java.sun.com/products/javahelp/helpset_2_0.dtd">
55
<helpset version="2.0" xml:lang="en-GB">
6-
<title>FuzzDB Web Backdoors Add-On</title>
6+
<title>FuzzDB Offensive Add-On</title>
77

88
<maps>
9-
<homeID>fuzzdb-web-backdoors</homeID>
9+
<homeID>fuzzdb-offensive</homeID>
1010
<mapref location="map.jhm"/>
1111
</maps>
1212

‎src/main/javahelp/help/index.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,5 +4,5 @@
44
"http://java.sun.com/products/javahelp/index_2_0.dtd">
55

66
<index version="2.0">
7-
<indexitem text="FuzzDB Web Backdoors" target="fuzzdb-web-backdoors" />
7+
<indexitem text="FuzzDB Offensive" target="fuzzdb-offensive" />
88
</index>

‎src/main/javahelp/help/map.jhm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,5 +4,5 @@
44
"http://java.sun.com/products/javahelp/map_1_0.dtd">
55

66
<map version="1.0">
7-
<mapID target="fuzzdb-web-backdoors" url="contents/intro.html" />
7+
<mapID target="fuzzdb-offensive" url="contents/intro.html" />
88
</map>

‎src/main/javahelp/help/toc.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
<toc version="2.0">
77
<tocitem text="ZAP User Guide" tocid="toplevelitem">
88
<tocitem text="Add Ons" tocid="addons">
9-
<tocitem text="FuzzDB Web Backdoors" target="fuzzdb-web-backdoors"/>
9+
<tocitem text="FuzzDB Offensive" target="fuzzdb-offensive"/>
1010
</tocitem>
1111
</tocitem>
1212
</toc>

‎src/main/zapHomeFiles/fuzzers/fuzzdb/attack/README.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
<h1>FuzzDB Attack Patterns</h1>
2+
3+
**WAF Evasion** <br>
4+
* <a href=../master/docs/attack-docs/waf-bypass/regexp-security-cheatsheet.md>Regexp security Cheatsheet</a>
5+
* Source: https://github.com/attackercan/regexp-security-cheatsheet/blob/master/README.md

0 commit comments

Comments
 (0)