예제 #1
0
def api_list_vulns(type):
    check_admin()
    if type == "xss":
        total = Request.count_by('where result_xss = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by(
            'where result_xss = ? order by id desc limit ?,?', 'vulnerable',
            page.offset, page.limit)
    elif type == "sqli":
        total = Request.count_by('where result_sqli = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by(
            'where result_sqli = ? order by id desc limit ?,?', 'vulnerable',
            page.offset, page.limit)
    elif type == "fi":
        total = Request.count_by('where result_fi = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by(
            'where result_fi = ? order by id desc limit ?,?', 'vulnerable',
            page.offset, page.limit)
    else:
        raise notfound()
    return dict(type=content_escape(type),
                requests=content_escape(requests),
                page=page)
예제 #2
0
파일: urls.py 프로젝트: akz747/NagaScan
def api_list_vulns(type):
    check_admin()
    if type == "xss":
        total = Request.count_by('where result_xss = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by('where result_xss = ? order by id desc limit ?,?', 'vulnerable', page.offset, page.limit)
    elif type == "sqli":
        total = Request.count_by('where result_sqli = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by('where result_sqli = ? order by id desc limit ?,?', 'vulnerable', page.offset, page.limit)
    elif type == "fi":
        total = Request.count_by('where result_fi = ?', 'vulnerable')
        page = Page(total, _get_page_index())
        requests = Request.find_by('where result_fi = ? order by id desc limit ?,?', 'vulnerable', page.offset, page.limit)
    else:
        raise notfound()
    return dict(type=content_escape(type), requests=content_escape(requests), page=page)