Request Non-Static Object that represents a HTTP request. [i[br]]Has methods to create and send HTTP requests. Request.new(string FullUrl) Creates Request object from Url, Request Method defaults to GET. string FullUrl Url should include the hostname and scheme. [i[br]]Eg: http://ironwasp.org Request.new(string Method, string FullUrl) Creates Request object from Url and sets the mentioned method. string Method Request method, Eg: GET or POST string FullUrl Url should include the hostname and scheme. [i[br]]Eg: http://ironwasp.org Request.new(string Method, string FullUrl, string BodyString) Creates Request object from Url, sets the mentioned method and sets the body. string Method Request method, Eg: GET or POST string FullUrl Url should include the hostname and scheme. [i[br]]Eg: http://ironwasp.org/index.html string BodyString Body of the request as string. full_url string Non-Static Entire Url along with scheme and hostname.[i[br]]Eg: http://ironwasp.org/index.html url string Non-Static Url without the scheme and hostname.[i[br]]Eg: /main/index.aspx?q=123 url_path string Non-Static The Path section of the Url without the QueryString.[i[br]]Eg: /main/index.aspx url_path_parts string[] Non-Static Array of strings where each element is a part of the UrlPath property.[i[br]]Eg: ['main','index.aspx'] ssl bool Non-Static Bool value stating if the request is a SSL request or not. [i[br]]Set this to True to create a SSL request. http_method string Non-Static HTTP Method of the Request. [i[br]]Eg: GET, POST etc. http_version string Non-Static Version number of the HTTP Request - HTTP/1.1 or HTTP/1.0 query Parameters Non-Static Contains the QueryString parameters in a list of Key/Value pairs. [i[br]]Access these parameters using the methods of the Parameter Class body Parameters Non-Static Contains the Request Body parameters in a list of Key/Value pairs. [i[br]]Access these parameters using the methods of the Parameter Class cookie Parameters Non-Static Contains the Cookie parameters in a list of Key/Value pairs. [i[br]]Access these parameters using the methods of the Parameter Class headers Parameters Non-Static Contains the Request Headers in a list of Key/Value pairs. [i[br]]Access these parameters using the methods of the Parameter Class host string Non-Static Hostname of the target server. [i[br]]Eg: www.ironwasp.org has_body bool Non-Static [READ-ONLY] Boolean value representing the presence of a Body in the Request. body_string string Non-Static Entire Body of the Request as a single string. [i[br]]Encoding charset used is taken from the Content-Type header or ISO-8859-1 is used if none is present. binary_body_string string Non-Static Entire Body of the Request as a Base64 encoded string. [i[br]]If a Binary Request body must be assigned then it can be assigned to this property or to the body_array property.[i[br]](IronWASP stores binary body as base64 string in its logs). body_array byte[] Non-Static Entire Body of the Request as a Byte Array. body_length int Non-Static Length of the Request Body. cookie_string string Non-Static Gives the value of the 'Cookie' header of the Request. [i[br]]This property can be assigned a new string to update the Cookie value as well. content_type string Non-Static Value of the Content-Type Header, including the Charset information(if present). is_binary bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Request is in text or binary format. [i[br]] This property can be controlled by setting a suitable value in the HTTP API section of the config panel response Response Non-Static [READ-ONLY] Response object associated with this Request. [i[br]]Generated on calling the send_req() method. send_req() Non-Static response Sends the request to the server and returns the Response object. [i[br]]Call blocks the thread. follow(Response ResponseToFollow) Non-Static Response ResponseToFollow A 3xx response that must be followed response If the response status code is a 301, 302, 303 or 307 then it is followed else the response passed in is returned. get_redirect(Response RedirectResponse) Non-Static Response RedirectResponse Response to the Request which contains a Redirect header request If the response status code is a 301, 302, 303 or 307 then the a Request object specific to follow the redirection is returned.[i[br]]If the Response is not a redirect then a null value is returned. set_cookie(Response Res) Non-Static Response Res IronWASP Response object none Reads the contents of the Set-Cookie headers from the Response object and adds them as cookies in the Request. set_cookie(SetCookie[] SetCookies) Non-Static SetCookie[] SetCookies A list of SetCookie objects. This is usually the SetCookies property of the IronWASP Response object. none Sets the Cookie of the request with the provided value. set_cookie(SetCookie SetCookieObject) Non-Static SetCookie SetCookieObject A SetCookie object none Sets the Cookie of the request with the provided value. set_cookie(CookieStore Store) Non-Static CookieStore Store CookieStore object where cookies are stored none Reads the CookieStore objects and the Cookies relevant to this Request are added. [i[br]]Revelant cookies are picked based on the Host, Path and Secure attributes of the cookies stored in the CookieStore. get_body_encoding() Non-Static string Returns the Encoding Charset of the request from the Content-Type header. [i[br]]If no Charset is specified then ISO-8859-1 is returned. get_headers_as_string() Non-Static string Returns the entire Request header section containing the method, url, HTTP version and headers as a single string. to_string() Non-Static string Returns the entire Request as a single string. to_binary_string() Non-Static string Returns the entire Request as a specially formatted string that preserves any binary content in the request body. get_full_request_as_byte_array() Non-Static byte_[] Returns the entire Request header section containing the method, url, HTTP version and headers as a Byte Array. from_proxy_log(int ID) Static int ID ID of the Request in the Proxy Log. request Creates a Request object from the specified record in the Proxy Log and returns it. from_proxy_log() Static request_[] Creates an array of all Request objects from the Proxy Log and returns it. from_test_log(int ID) Static int ID ID of the Request in the Manual Testing Log. request Creates a Request object from the specified record in the Manual Testing Log and returns it. from_test_log() Static request_[] Creates an array of all Request objects from the Manual Testing Log and returns it. from_probe_log(int ID) Static int ID ID of the Request in the Probe Log. request Creates a Request object from the specified record in the Probe Log (Crawler) and returns it. from_probe_log() Static request_[] Creates an array of all Request objects from the Probe Log(Crawler) and returns it. from_shell_log(int ID) Static int ID ID of the Request in the Scripting Shell Log. request Creates a Request object from the specified record in the Scripting Shell Log and returns it. from_shell_log() Static request_[] Creates an array of all Request objects from the Scripting Shell Log and returns it. from_scan_log(int ID) Static int ID ID of the Request in the 'Automated Scanning' Log. request Creates a Request object from the specified record in the 'Automated Scanning' Log and returns it. from_scan_log() Static request_[] Creates an array of all Request objects from the 'Automated Scanning' Log and returns it. from_string(string RequestString) Static string RequestString String representing the entire request, usually the output of the to_string() method. request Creates a Request object from the string and returns it. from_binary_string(string RequestBinaryString) Static string RequestString Specially formatted binary string representing the entire request, the output of the to_binary_string() method. request Creates a Request object from the string and returns it. get_id() Non-Static int Returns the ID of the Request object in its respective log. Response Non-Static Object that represents a HTTP response. Has methods to read and analyze the response. code int Non-Static [READ-ONLY] Status code of the response. [i[br]]Eg: 200 status string Non-Static [READ-ONLY] Status description of the response. [i[br]]Eg: OK http_version string Non-Static [READ-ONLY] HTTP Version of the response.[i[br]]Eg: HTTP/1.1 set_cookies SetCookie[] Non-Static A collection of SetCookie objects. This is built by parsing the 'Set-Cookie' headers in the Response headers Parameters Non-Static Contains the Request Headers in a list of Key/Value pairs. [i[br]]Access these parameters using the methods of the Parameter Class is_binary bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is in text or binary format. [i[br]] This property can be controlled by setting a suitable value in the HTTP API section of the config panel has_body bool Non-Static [READ-ONLY] Boolean value representing the presence of a Body in the Response. body_string string Non-Static Body of the response represented as a string. binary_body_string string Non-Static Body of the response represented as a Base64 encoded string. body_array byte[] Non-Static Body of the response represented as a Byte Array. body_encoding string Non-Static Content Encoding used for the Response Body. html HTML Non-Static Body of the Response represented as a HTML object. is_html bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is HTML text or not. is_java_script bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is valid JavaScript text or not. is_css bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is valid CSS text or not. is_xml bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is valid XML text or not. is_json bool Non-Static [READ-ONLY] Boolean value indicating if the Body of the Response is valid JSON text or not. to_string() Non-Static string Returns the entire Response as a single string. Session Non-Static Represents an HTTP transaction, contains a Request and a Response object. request Request Non-Static The Request object stored inside the Session. response Response Non-Static The Response corresponding to the Request object, if available. from_proxy_log(int ID) Static int ID ID of the Session in the Proxy Log. session Creates an Session object from the specified record in the Proxy Log and returns it. from_proxy_log() Static session_[] Creates an array of all Session objects from the Proxy Log and returns it. from_test_log(int ID) Static int ID ID of the Session in the Manual Testing Log. session Creates an Session object from the specified record in the Manual Testing Log and returns it. from_test_log() Static session_[] Creates an array of all Session objects from the Manual Testing Log and returns it. from_probe_log(int ID) Static int ID ID of the Session in the Probe Log. session Creates an Session object from the specified record in the Probe Log(Crawler) and returns it. from_probe_log() Static session_[] Creates an array of all Session objects from the Probe Log(Crawler) and returns it. from_shell_log(int ID) Static int ID ID of the Session in the Scripting Shell Log. session Creates an Session object from the specified record in the Scripting Shell Log and returns it. from_shell_log() Static session_[] Creates an array of all Session objects from the Scripting Shell Log and returns it. from_scan_log(int ID) Static int ID ID of the Session in the 'Automated Scanning' Log. session Creates an Session object from the specified record in the 'Automated Scanning' Log and returns it. from_scan_log() Static session_[] Creates an array of all Session objects from the 'Automated Scanning' Log and returns it. get_id() Non-Static int Returns the ID of the Session object in its respective log. Parameters Non-Static Base class for the QueryParameters, BodyParameters, HeaderParameters and CookieParameter classes. Used to store Key-Value pairs. Key is a string and Value is a list of strings.[i[br]] The Keys for HeaderParameters are case-insensitive, for others it is case-sensitive. count int Non-Static Number of Parameters present in this object. get(string Name) Non-Static string Name Name of the parameter string Returns the value of the parameter with the given name in the same decoded form as the application would see it. [i[br]]For example in the Url 'http://example.org/a?q=a%23b' the value of Query parameter 'q' will be returned as 'a#b' by the Get method as it will properly decode it before returning. raw_get(string Name) Non-Static string Name Name of the parameter string Returns the raw value of the parameter with the given name, as it appears in the HTTP Request string that is sent over the network. [i[br]]Depending on if this is Query/Body/Header/Cookie parameter the value will be the appropriate encoded form.[i[br]]For example in the Url 'http://example.org/a?q=a%23b' the value of Query parameter 'q' will be returned as 'a%23b' by RawGet method, whereas the Get method would decode it and return as 'a#b'. get_names() Non-Static string_[] Returns the Names of all the parameters as a list. The form of parameter names is the same decoded form as the application would see it.[i[br]]For example in the Url 'http://example.org/a?q%23r=ab' the value of Query parameter name will be returned as 'q#r' by GetNames method. raw_get_names() Non-Static string_[] Returns the Names of all the parameters as a list. The form of the parameter names is as it appears in the HTTP Request string that is sent over the network. [i[br]]Depending on if this is Query/Body/Header/Cookie parameter name the value will be the appropriate encoded form.[i[br]]For example in the Url 'http://example.org/a?q%23r=ab' the value of Query parameter name will be returned as 'q%23r' by RawGetNames method, whereas the GetNames method would decode it and return as 'q#r'. get_all(string Name) Non-Static string Name Name of the parameter string_[] Returns all values of the parameters with the given name. The form of the parameter values is the same decoded form as the application would see it(Refer Get for example). [i[br]]Used when there are two or more parameters with the same name. raw_get_all(string Name) Non-Static string Name Name of the parameter string_[] Returns all values of the parameters with the given name. The form of the parameter values is as they appear in the HTTP Request string that is sent over the network (Refer RawGet for example).[i[br]]Used when there are two or more parameters with the same name. set(string Name, string Value) Non-Static string Name Name of the parameter string Value Value of the parameter in the decoded form you want the application to see it. [i[br]]Eg: If set('q', 'a+b') is called on Query parameter of a Request then the in the Url it would become '?q=a%2bb' and so the value of q will be read by the application as 'a+b', as originally set. void Adds the Name/Value pair to the parameters list. [i[br]] If a parameter with that name exisits then it is overwritten. raw_set(string Name, string Value) Non-Static string Name Name of the parameter string Value Value of the parameter in the encoded form as it appears in the HTTP Request string that is sent over the network. [i[br]]Eg: If raw_set('q', 'a+b') is called on Query parameter of a Request then in the Url it would become '?q=a+b' and so the value of q will be read by the application as 'a b'. void Adds the Name/Value pair to the parameters list. [i[br]] If a parameter with that name exisits then it is overwritten. set_at(string Name, int SubParameterPosition, string Value) Non-Static string Name Name of the parameter int SubParameterPosition When there are two or more parameters with the same name then this indicates the zero-based index of the parameter position that must be set string Value Value of the parameter in the decoded form you want the application to see it. void Adds the Name/Value pair to the parameters list at a specified position if two or more parameters exist with the same name. [i[br]] If a parameter with that name exisits then it is overwritten. raw_set_at(string Name, int SubParameterPosition, string Value) Non-Static string Name Name of the parameter int SubParameterPosition When there are two or more parameters with the same name then this indicates the zero-based index of the parameter position that must be set string Value Value of the parameter in the encoded form as it appears in the HTTP Request string that is sent over the network. void Adds the Name/Value pair to the parameters list at a specified position if two or more parameters exist with the same name. [i[br]] If a parameter with that name exisits then it is overwritten. set(string Name, string[] Values) Non-Static string Name Name of the parameter string[] Values Array of multiple values for the same parameter. The values are in the decoded form you want the application to see it. void Adds the Name/Value pair to the parameters list. [i[br]] If a parameter with that name exisits then it is overwritten. raw_set(string Name, string[] Values) Non-Static string Name Name of the parameter string[] Values Array of multiple values for the same parameter. The values of the parameter in the encoded form as it appears in the HTTP Request string that is sent over the network. void Adds the Name/Value pair to the parameters list. [i[br]] If a parameter with that name exisits then it is overwritten. add(string Name, string Value) Non-Static string Name Name of the parameter string Value Value of the parameter in the decoded form you want the application to see it. [i[br]]Eg: If add('q', 'a+b') is called on Query parameter of a Request then the in the Url it would become '?q=a%2bb' and so the value of q will be read by the application as 'a+b', as originally set. void Adds the Name/Value pair to the parameters list. [i[br]]If a parameter with that name exisits then this value is appened to the exisiting list. raw_add(string Name, string Value) Non-Static string Name Name of the parameter string Value Value of the parameter in the encoded form as it appears in the HTTP Request string that is sent over the network. [i[br]]Eg: If raw_add('q', 'a+b') is called on Query parameter of a Request then in the Url it would become '?q=a+b' and so the value of q will be read by the application as 'a b'. void Adds the Name/Value pair to the parameters list. [i[br]]If a parameter with that name exisits then this value is appened to the exisiting list. remove(string Name) Non-Static string Name Name of the parameter void Removes the specified parameter from the list. remove_all() Non-Static void Removes all parameters from the list. has(string Name) Non-Static string Name Name of the parameter bool Checks if the given parameter name exists in the list and returns a bool value. get_multis() Non-Static string_[] Returns the name of the parameters that have multiple values. [i[br]]Use GetAll to get those values. Tools Static Collection of commonly required utilities url_encode(string Input) Static string Input String to encode string Returns a Url-Encoded version of the input. html_encode(string Input) Static string Input String to encode string Returns a HTML-encoded version of the input. base64_encode(string Input) Static string Input String to encode string Returns a Base64-encoded version of the input. to_hex(string Input) Static string Input String to encode string Converts all characters to HEX string and returns it. to_hex(byte[] Input) Static byte[] Input ByteArray to encode string Converts all bytes to HEX string and returns it. hex_encode(string Input) Static string Input String to encode string Converts all characters to HEX string with a preceding '%' and returns it. xml_encode(string Input) Static string Input String to encode string Encodes the Input to make it suitable to be added as a XML node's value url_decode(string Input) Static string Input String to decode string Returns a Url-Decoded version of the input. html_decode(string Input) Static string Input String to decode string Returns a HTML-Decoded version of the input. base64_decode(string Input) Static string Input String to decode string Returns a Base64-Decoded version of the input. base64_decode_to_hex(string Input) Static string Input String to decode string Base64 decodes the Input and returns the results as a Hex string. hex_decode(string Input) Static string Input String to decode string Converts all the HEX characters to ascii equivalents. md5(string Input) Static string Input String to Hash string Creates a MD5 hash of the input. sha1(string Input) Static string Input String to Hash string Creates a SHA1 hash of the input. sha256(string Input) Static string Input String to Hash string Creates a SHA256 hash of the input. sha384(string Input) Static string Input String to Hash string Creates a SHA384 hash of the input. sha512(string Input) Static string Input String to Hash string Creates a SHA512 hash of the input. diff(string Source, string Destination) Static string Source String to be used as source text string Destination String to be used as destination text diff_result Does a line-by-line Diff of two multi-line strings and returns a DiffResult object containg the result. diff_line(string Source, string Destination) Static string Source String to be used as source text string Destination String to be used as destination text diff_result Does a word-by-word Diff of single line strings and returns a DiffResult object containg the result. diff_level(string Source, string Destination) Static string Source String to be used as source text string Destination String to be used as destination text int Gives a value between 0 - 100 indicating the percent of difference between the two strings. 0 indicates the two strings are same. 100 indicates the two strings are fully different. DiffResult Non-Static Represents a result of a Diff of two strings. Returned by the method - Tools.Diff() deleted int[] Non-Static Line numbers in the first string that are not present in the second string missing_at int[] Non-Static Line numbers in the second string where the deleted sections of first string should have appeared inserted int[] Non-Static Line numbers in the second string that contain sections not present in the first string un_changed int[] Non-Static Line numbers in the second string that remain the same as first string deleted_sections string[] Non-Static Sections of the first string that are not present in the second string inserted_sections string[] Non-Static Sections of the second string that are not present in the first string un_changed_sections string[] Non-Static Sections of the second string that are also present in the first string AskUser Static Class that enables scripts to create UI pop-ups and get data from user at run-time. for_bool(string Title, string Message) Static string Title Title of the message, shown at the top of the pop-up window string Message Message to be shown to to the user bool Shows a pop-up window with the provided title and message along with a 'Yes' and a 'No' button and waits. Returns the user's input as a boolean. for_string(string Title, string Message) Static string Title Title of the message, shown at the top of the pop-up window string Message Message to be shown to to the user bool Shows a pop-up window with the provided title and message along with an input field and a 'Submit' button. Returns the user's input as a string. for_string(string Title, string Message, string ImageFilePath) Static string Title Title of the message, shown at the top of the pop-up window string Message Message to be shown to to the user string ImageFilePath Full path to any image file on the local hard drive. Eg: Capcha images bool Shows a pop-up window with the provided title and message and also displays the image inside this window along with an input field and a 'Submit' button. Returns the user's input as a string. SetCookie Non-Static Represents all the information available in a Set-Cookie header SetCookie.new(string SetCookieHeaderString) Parses the a Set-Cookie header and creates a object that gives easy access to the contained information string SetCookieHeaderString The Set-Cookie header string name string Non-Static [READ-ONLY] Name of the key in the key-value pair included in the Set-Cookie header value string Non-Static [READ-ONLY] Value of the key included in the Set-Cookie header full_string string Non-Static [READ-ONLY] Returns the full Set-Cookie header as a single string path string Non-Static [READ-ONLY] Value of the Path attribute domain string Non-Static [READ-ONLY] Value of the Domain attribute expires string Non-Static [READ-ONLY] Value of the Expires attribute max_age string Non-Static [READ-ONLY] Value of the Max-Age attribute http_only bool Non-Static [READ-ONLY] Boolean value inditicating if the HttpOnly flag is set. secure bool Non-Static [READ-ONLY] Boolean value inditicating if the Secure flag is set. comment string Non-Static [READ-ONLY] Comments contained in the Set-Cookie header version string Non-Static [READ-ONLY] Version information from the Set-Cookie header CookieStore Non-Static A store to save Cookies and add them to any Requests CookieStore.new() Creates a new empty Cookie Store object add(Request Req, Response Res) Non-Static Request Req Request object that was sent to the server Response Res Response object recieved for the Request void Updates the CookieStore with the Response object's SetCookie headers add(string Host, string Cookie) Non-Static string Host Hostname of the site string Cookie Cookie header as a string Eg: "SessionID=sad797asjd2323" void Updates the CookieStore with the Cookie against the specified Hostname get_cookies() Non-Static set_cookie_[] Returns a list of SetCookie objects that represent all the cookies stored inside the CookieStore object get_cookies(Request Req) Non-Static Request Req Request that must be sent to the server set_cookie_[] Returns a list of SetCookie objects that represent the matching cookies stored inside the CookieStore object. Matches are done on the Hostname and Path of the Request object and the stored cookies. HTML Non-Static A class that represents a HTML document and contains methods to traverse it. HTML.new(string HtmlString) Creates a HTML object from raw string containg HTML tags string HtmlString String containg HTML tags, usually the Response Body. links string[] Non-Static Lists all the links contained in the HTML document comments string[] Non-Static Lists all the comments contained in the HTML document html HtmlDocument Non-Static The base HtmlDocument object of HtmlAgilityPack load(string HtmlString) Non-Static void Updates the HTML object with new HtmlString get(string ElementName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string_[] Returns all the elements of the given name as strings. [i[br]]Eg: my_html.get("script") get(string ElementName, string AttributeName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element. Eg: 'src', 'onload' etc string_[] Returns matching elements as strings. Elements matched by the element name and the presence of the provided attribute. [i[br]]Eg: my_html.get("script","src") get(string ElementName, string AttributeName, string AttributeValues) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element. Eg: 'src', 'onload' etc string AttributeValue Value of the Attribute mentioned in the last parameter. string_[] Returns matching elements as strings. Elements matched by the element name and the presence of the provided attribute. [i[br]]Eg: my_html.get("*","class","code") get_values(string ElementName, string AttributeName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element whose value must be returned. Eg: 'src', 'onload' etc string_[] Returns the matching atrribute values as list of strings. Elements matched by the element name and the presence of the provided attribute. [i[br]]Eg: my_html.GetValues("script","src") get_values(string ElementName, string AttributeName, string AttributeValues, string InterestedAttributeName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element. Eg: 'src', 'onload', 'id' etc string AttributeValue Value of the Attribute mentioned in the last parameter. string InterestedAttributeName Name of an attribute of the element whose value must be returned. Eg: 'src', 'onload', 'id' etc string_[] Returns the interested attribute values as list of strings from the elements matched by the element name and containing the provided attribute name/value pair. the presence of the provided attribute. [i[br]]Eg: my_html.GetValues("a", "class", "left_nav", "href") will get the 'href' values of only those 'a' tags that have a 'class' attribute with value 'left_nav' get_meta_content(string MetaAttributeName, string MetaAttributeValue) Non-Static string MetaAttributeName Name of an HTML Meta tag attribute. Eg: 'http-equiv' string MetaAttributeValue Value of the attributes mentioned by the MetaAttributeName parameter. Eg: 'set-cookie' (in case of attribute name 'http-equiv') string_[] Returns the value of the 'content' attribute of 'meta' HTML tag that have an attribute matching MetaAttributeName with its value matching as MetaAttributeValue, as list of strings. [i[br]]Eg: my_html.GetMetaContent("http-equiv", "set-cookie") get_nodes(string ElementName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc html_node_collection Returns all the elements of the given name as HtmlNodeCollection object of HtmlAgilityPack. [i[br]]Eg: my_html.get("script") get_nodes(string ElementName, string AttributeName) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element. Eg: 'src', 'onload' etc html_node_collection Returns matching elements as HtmlNodeCollection object of HtmlAgilityPack. Elements matched by the element name and the presence of the provided attribute. [i[br]]Eg: my_html.get("script","src") get_nodes(string ElementName, string AttributeName, string AttributeValues) Non-Static string ElementName Name of an HTML element. Eg: 'img', 'body' etc string AttributeName Name of an attribute of the element. Eg: 'src', 'onload' etc string AttributeValue Value of the Attribute mentioned in the last parameter. html_node_collection Returns matching elements as HtmlNodeCollection object of HtmlAgilityPack. Elements matched by the element name and the presence of the provided attribute. [i[br]]Eg: my_html.get("*","class","code") query(string XpathQuery) Non-Static string XpathQuery Xpath Query that must be executed on the Html object. Eg: "//a" string_[] Returns all the elements of the given Html object that matched the Xpath Query as strings. [i[br]]Eg: my_html.QueryNodes("//a") query_nodes(string XpathQuery) Non-Static string XpathQuery Xpath Query that must be executed on the Html object. Eg: "//a[@onclick]" html_node_collection Returns all the elements of the given name as HtmlNodeCollection object of HtmlAgilityPack that matched the Xpath Query. [i[br]]Eg: my_html.QueryNodes("//a[@onclick]") query_values(string XpathQuery, string AttributeName) Non-Static string XpathQuery Xpath Query that must be executed on the Html object. Eg: "//a[@onclick]" string AttributeName Name of the Attribute whose value must be returned string_[] Returns an array of strings containing the value of the Attribute from the Nodes that matched the Xpath Query. [i[br]]Eg: my_html.QueryNodes("//a[@onclick]") get_forms() Non-Static html_node_[] Returns an array of HtmlNode(HtmlAgilityPack) objects that represent the Forms in the Html object. The HtmlNodes only contain the Form and Input Html elements, unnecessary elements are stripped off. get_java_script() Non-Static string_[] Returns an array of string containing all the JavaScript from the Script tags and event attributes of the Html get_java_script(string Keyword) Non-Static string Keyword A string value set by user, only JavaScript snippets that have this keyword are returned. string_[] Returns an array of string containing all the JavaScript that contain the Keyword, from the Script tags and event attributes of the Html get_visual_basic() Non-Static string_[] Returns an array of string containing all the VisualBasic from the Script tags of the Html get_visual_basic(string Keyword) Non-Static string Keyword A string value set by user, only VisualBasic snippets that have this keyword are returned. string_[] Returns an array of string containing all the VisualBasic that contain the Keyword, from the Script tags of the Html get_css() Non-Static string_[] Returns an array of string containing all the CSS from the Style tags and style attributes of the Html get_css(string Keyword) Non-Static string Keyword A string value set by user, only CSS snippets that have this keyword are returned. string_[] Returns an array of string containing all the CSS that contain the Keyword, from the Style tags and style attributes of the Html xpath_safe(string Input) Non-Static string Input The value that must be made Xpath safe string Takes the input string and returns an ouput that is fit to be used as an attribute value in a Xpath query. get_context(string Keyword) Non-Static string Keyword The Keyword whose context must be found string_[] Checks the occurances of the Keyword in the Html and returns the contexts. ActivePlugin Non-Static An IronPython or IronRuby script that performs some vulnerability checks on the a webpage through active interaction. name string Non-Static Name of the Active Plugin description string Non-Static Information about the plugin. version string Non-Static Version number of the Plugin add(ActivePlugin NewActivePluginObject) Static ActivePlugin NewActivePluginObject New ActivePlugin Object void Adds a new Active Plugin to IronWASP's internal list get(string PluginName) Static string PluginName Name of the ActivePlugin active_plugin Returns a ActivePlugin of the given name from IronWASP's internal list. [i[br]]Eg: ActivePlugin.get("Cross-site Scripting") list() Static string_[] Returns the names of all ActivePlugins currently present in IronWASP's internal list. check(Request Req, Scanner Scan) Non-Static Request Req The Request that is being scanned Scanner Scan The Scanner object that is calling this Active Plugin void This method contains the vulnerability checking logic of this particular ActivePlugin and performs the required check. PassivePlugin Non-Static An IronPython or IronRuby script that performs some vulnerability checks on requests/responses passively. name string Non-Static Name of the Passive Plugin description string Non-Static Information about the plugin. version string Non-Static Version number of the Plugin add(PassivePlugin NewPassivePluginObject) Static PassivePlugin NewPassivePluginObject New PassivePlugin Object void Adds a new Passive Plugin to IronWASP's internal list get(string PluginName) Static string PluginName Name of the PassivePlugin passive_plugin Returns a PassivePlugin of the given name from IronWASP's internal list. list() Static string_[] Returns the names of all PassivePlugins currently present in IronWASP's internal list. check(Session Sess, PluginResults Results) Non-Static Session Sess The Session object that is being passively scanned PluginResults Results The object that will hold the findings of the check if any. void This method contains the vulnerability checking logic of this particular PassivePlugin and performs the required check. FormatPlugin Non-Static An IronPython or IronRuby script that can convert an object of any special format to xml and back. name string Non-Static Name of the Format Plugin description string Non-Static Information about the plugin. version string Non-Static Version number of the Plugin add(FormatPlugin NewFormatPluginObject) Static FormatPlugin NewFormatPluginObject New FormatPlugin Object void Adds a new Format Plugin to IronWASP's internal list get(string PluginName) Static string PluginName Name of the FormatPlugin format_plugin Returns a FormatPlugin of the given name from IronWASP's internal list. list() Static string_[] Returns the names of all FormatPlugins currently present in IronWASP's internal list. xml_to_array(string Xml) Static string Xml The Xml must be converted in to array string_[,] Converts the Xml input in to a two-dimensional array and returns it. The two-dimensional array holds the values in the Xml and the node path of the values. This information is used for fuzzing the Xml. inject_in_xml(string Xml, int InjectionPosition, string ValueToString) Static string Xml The Xml in to which a value must be injected int InjectionPosition The position in the Xml where the value must be injected. This is the index of the value in the two-dimensional array returned by FormatPlugin.XmlToArray(Xml) string ValueToString The value that must be injected in to the Xml string Inserts a value in to the specified position in the Xml and returns the updated Xml. This method is used in fuzzing Xml based data or data of any format that gets converted to Xml by the approriate FormatPlugin SessionPlugin Non-Static An IronPython or IronRuby script that would contain methods to define a specific web application's custom behaviour. name string Non-Static Name of the Session Plugin description string Non-Static Information about the plugin. version string Non-Static Version number of the Plugin add(SessionPlugin NewSessionPluginObject) Static SessionPlugin NewSessionPluginObject New SessionPlugin Object void Adds a new Session Plugin to IronWASP's internal list get(string PluginName) Static string PluginName Name of the SessionPlugin format_plugin Returns a SessionPlugin of the given name from IronWASP's internal list. list() Static string_[] Returns the names of all SessionPlugins currently present in IronWASP's internal list. Scanner Non-Static A class to create a custom security scanner by determining injection points and active plugins. Scanner.new(Request RequestToScan) Creates a new Scanner object based on the Request Request RequestToScan A request that would be scanned by the scanner object. session_handler SessionPlugin Non-Static Session plugin assosiated with this scanner to control its behaviour body_format FormatPlugin Non-Static Format Plugin associated with this scanner to represent the body of the scanner's request. injected_section string Non-Static Name of the section of the request that is being currently injected. Possible values are URL, Query, Body, Cookie and Headers. [i[br]] (Only to be called within the ActivePlugin script) injected_parameter string Non-Static Name of the parameter that is being currently injected. [i[br]] (Only to be called within the ActivePlugin script) injected_url_path_position int Non-Static The index of the UrlPathParts that is being currently injected. [i[br]] (Only to be called within the ActivePlugin script) pre_injection_parameter_value string Non-Static Original value of the parameter that is being currently injected. [i[br]] (Only to be called within the ActivePlugin script) injected_request Request Non-Static Request sent to the serer with some parameter injected. [i[br]] (Only to be called within the ActivePlugin script) injection_response Response Non-Static Response returned from the server for InjectedRequest. [i[br]] (Only to be called within the ActivePlugin script) add_check(string ActivePluginName) Non-Static string ActivePluginName Name of the active plugin that must be included in the scan. void Includes an Active Plugin to the scanner and calls it at scan time. remove_check(string ActivePluginName) Non-Static string ActivePluginName Name of the ActivePlugin to be removed from the scanner void Removes the Active Plugins from the list of checks the scanner calls at scan time. show_checks() Non-Static string_[] Returns the names of all ActivePlugins that will be called by the Scanner at scan time. clear_checks() Non-Static void Removes all the Active Plugins that would have been called by the Scanner at scan time. inject_all() Non-Static void Sets injection points in all Url positions, Query, Body, Cookie and Header parameters. inject_url() Non-Static void Sets injection points in all Url positions. inject_url(int UrlPosition) Non-Static int UrlPosition Zero based value of the Url position that must be injected void Sets an injection point at the specified Url position. inject_query() Non-Static void Sets injection points in all Query parameter positions. inject_query(string ParameterName) Non-Static string ParameterName Name of the parameter where an injection point must be set. void Sets an injection point at all occurances of the given parameter name in the query. inject_query(string ParameterName, int SubParameterPosition) Non-Static string ParameterName Name of the parameter where an injection point must be set. int SubParameterPosition SubParameter Position of the parameter that must be injected void Sets an injection point at the specified occurance of the given parameter name in the query if multiple parameter exist with the same name. inject_body() Non-Static void Sets injection points in all Body parameter positions. inject_body(string ParameterName) Non-Static string ParameterName Name of the parameter where an injection point must be set. void Sets an injection point at all occurances of the given parameter name in the Body. inject_body(string ParameterName, int SubParameterPosition) Non-Static string ParameterName Name of the parameter where an injection point must be set. int SubParameterPosition SubParameter Position of the parameter that must be injected void Sets an injection point at the specified occurance of the given parameter name in the body if multiple parameter exist with the same name. inject_body(int XmlArrayInjectionPoint) Non-Static int XmlArrayInjectionPoint A position inside the XmlInjectionPoints array void If a FormatPlugin is set then sets an injection point the specified point in the XmlInjectionPoints array. inject_cookie() Non-Static void Sets injection points in all Cookie parameter positions. inject_cookie(string ParameterName) Non-Static string ParameterName Name of the parameter where an injection point must be set. void Sets an injection point at all occurances of the given parameter name in the Cookie. inject_cookie(string ParameterName, int SubParameterPosition) Non-Static string ParameterName Name of the parameter where an injection point must be set. int SubParameterPosition SubParameter Position of the parameter that must be injected void Sets an injection point at the specified occurance of the given parameter name in the Cookie if multiple parameter exist with the same name. inject_headers() Non-Static void Sets injection points in all Headers parameter positions. inject_headers(string ParameterName) Non-Static string ParameterName Name of the parameter where an injection point must be set. void Sets an injection point at all occurances of the given parameter name in the Headers. inject_headers(string ParameterName, int SubParameterPosition) Non-Static string ParameterName Name of the parameter where an injection point must be set. int SubParameterPosition SubParameter Position of the parameter that must be injected void Sets an injection point at the specified occurance of the given parameter name in the Headers if multiple parameter exist with the same name. launch_scan() Non-Static void Similar to scan() but instead of performing the scan in the current thread it queues the scan job in the 'AutomatedScanning' section. The scan logs will be updated in the 'ScanLog' grid instead of the 'ScriptingLog' grid. inject(string Payload) Non-Static string Payload Payload to be injected response Injects the payload in the section of the request where the current injection pointer lies and returns the corresponding response. [i[br]] (Only to be called within the ActivePlugin script) IronJint Static A JavaScript static analyzer to check for DOM-based XSS issues trace(string JavaScriptCode) Static string JavaScriptCode The JavaScript code that must be analyzed trace_result Analyzes the JavaScript code for instances where DOM XSS Sources and Sinks are present including instances where Sources are assigned to Sinks. The result of the analysis is stored in a TraceResult object and returned. trace(string JavaScriptCode, string Keyword) Static string JavaScriptCode The JavaScript code that must be analyzed string Keyword The Keyword that must be traced through the JavaScript trace_result Analyzes the JavaScript code for instances where the given keyword is assigned to DOM XSS Sinks. The result of the analysis is stored in a TraceResult object and returned. is_expression_statement(string JavaScriptCode, string Keyword) Static string JavaScriptCode The JavaScript code that must be analyzed string Keyword The string value that must be checked for being an expression statement. bool Parses the input JavaScript code and checks if the keyword appears inside the JavaScript as an expression statement. beautify(string JavaScriptCode) Static string JavaScriptCode The JavaScript code that must be beautified string Properly formats the input code and returns a more readable version TraceResult Non-Static Represents the result of JavaScript static analysis performed using the Trace method of IronJint. source_line_nos int[] Non-Static Line numbers that are tained by a DOM XSS source sink_line_nos int[] Non-Static Line numbers that are tained by a DOM XSS sink source_to_sink_line_nos int[] Non-Static Line numbers where a DOM XSS source is assigned to a DOM XSS sink. If this is the result of IronJint.Trace(code, keyword) then these are the lines where the keyword is assigned to a DOM XSS sink. source_lines string[] Non-Static Lines that are tained by a DOM XSS source sink_lines string[] Non-Static Lines that are tained by a DOM XSS sink source_to_sink_lines string[] Non-Static Lines where a DOM XSS source is assigned to a DOM XSS sink. If this is the result of IronJint.Trace(code, keyword) then these are the lines where the keyword is assigned to a DOM XSS sink. keyword_contexts string[] Non-Static If this is the result of IronJint.Trace(code, keyword) then list of contexts in which the given keyword is present in the JavaScript code is returned. lines string[] Non-Static All the lines of the cleaned up version of the input JavaScript code. GlobalStore Static A store for all types of objects that can be accessed from any part of the tool. put(string Name, object ObjectToStore) Static string Name Name by which the object will be referred to inside the store object ObjectToStore The object that must be stored void Any object like Request, Response etc can be stored in this store and can be referred to by the name assigned to it. get(string Name) Static string Name Name of the object stored object Fetch the object from the store by providing its name. has(string Name) Static string Name Name of the object stored bool Returns a boolean indicating if an object by that name exists in the store. remove(string Name) Static string Name Name of the object stored void Removes the object matching the name from the store. ThreadStore Static A store for all types of objects that is specific to a thread on which it is called. Objects stored in a ThreadStore are only accessible to calls made from the same thread. put(string Name, object ObjectToStore) Static string Name Name by which the object will be referred to inside the store object ObjectToStore The object that must be stored void Any object like Request, Response etc can be stored in this store and can be referred to by the name assigned to it. get(string Name) Static string Name Name of the object stored object Fetch the object from the store by providing its name. has(string Name) Static string Name Name of the object stored bool Returns a boolean indicating if an object by that name exists in the store. remove(string Name) Static string Name Name of the object stored void Removes the object matching the name from the store. clear() Static void Removes all the objects stored from calling thread. Objects stored from other threads are not affected. this_thread() Static int Returns the Thread ID of the thread from this this call is made. Config Static A class that holds some information about the tool. path string Static [READ-ONLY]Returns the full path of the location of the IronWASP binary in the file system. Calls used to instantiate the Class. Static and Non-Static variables available in the Class Static and Non-Static Function calls available in the Class. Members of the Enum class.