def handle_response(self, flow):
#check for zip file
if flow.request.scheme.endswith("http") and flow.response.headers.get(
"Content-Type")[0].endswith("application/zip"):
self.add_to_report(
"ZIP_PATH_TRAVERSAL",
"A ZIP file was downloaded using HTTP, application could be vulnerable to ZIP path traversal which could cause remote code execution or at least allowing an attacker to write to any file"
)
AnalyzerDecorator.handle_response(self, flow)
def handle_response(self, flow):
#check for zip file
if flow.request.scheme.endswith("http") and flow.response.headers.get("Content-Type")[0].endswith("application/zip"):
self.add_to_report("ZIP_PATH_TRAVERSAL","A ZIP file was downloaded using HTTP, application could be vulnerable to ZIP path traversal which could cause remote code execution or at least allowing an attacker to write to any file")
AnalyzerDecorator.handle_response(self,flow)
