Finding class
A Finding resource represents a vulnerability instance identified during a ScanRun.
Constructors
- Finding({String? body, String? description, String? finalUrl, String? findingType, Form? form, String? frameUrl, String? fuzzedUrl, String? httpMethod, String? name, OutdatedLibrary? outdatedLibrary, String? reproductionUrl, String? severity, String? trackingId, ViolatingResource? violatingResource, VulnerableHeaders? vulnerableHeaders, VulnerableParameters? vulnerableParameters, Xss? xss, Xxe? xxe})
- Finding.fromJson(Map json_)
Properties
- body ↔ String?
-
The body of the request that triggered the vulnerability.
getter/setter pair
- description ↔ String?
-
The description of the vulnerability.
getter/setter pair
- finalUrl ↔ String?
-
The URL where the browser lands when the vulnerability is detected.
getter/setter pair
- findingType ↔ String?
-
The type of the Finding.
getter/setter pair
- form ↔ Form?
-
An addon containing information reported for a vulnerability with an HTML
form, if any.
getter/setter pair
- frameUrl ↔ String?
-
If the vulnerability was originated from nested IFrame, the immediate
parent IFrame is reported.
getter/setter pair
- fuzzedUrl ↔ String?
-
The URL produced by the server-side fuzzer and used in the request that
triggered the vulnerability.
getter/setter pair
- hashCode → int
-
The hash code for this object.
no setterinherited
- httpMethod ↔ String?
-
The http method of the request that triggered the vulnerability, in
uppercase.
getter/setter pair
- name ↔ String?
-
The resource name of the Finding.
getter/setter pair
- outdatedLibrary ↔ OutdatedLibrary?
-
An addon containing information about outdated libraries.
getter/setter pair
- reproductionUrl ↔ String?
-
The URL containing human-readable payload that user can leverage to
reproduce the vulnerability.
getter/setter pair
- runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
- severity ↔ String?
-
The severity level of the reported vulnerability.
getter/setter pair
- trackingId ↔ String?
-
The tracking ID uniquely identifies a vulnerability instance across
multiple ScanRuns.
getter/setter pair
- violatingResource ↔ ViolatingResource?
-
An addon containing detailed information regarding any resource causing
the vulnerability such as JavaScript sources, image, audio files, etc.
getter/setter pair
- vulnerableHeaders ↔ VulnerableHeaders?
-
An addon containing information about vulnerable or missing HTTP headers.
getter/setter pair
- vulnerableParameters ↔ VulnerableParameters?
-
An addon containing information about request parameters which were found
to be vulnerable.
getter/setter pair
- xss ↔ Xss?
-
An addon containing information reported for an XSS, if any.
getter/setter pair
- xxe ↔ Xxe?
-
An addon containing information reported for an XXE, if any.
getter/setter pair
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toJson(
) → Map< String, dynamic> -
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited