SYMBOL INDEX (230 symbols across 36 files) FILE: database/bac_setup.sql type access_log (line 4) | CREATE TABLE IF NOT EXISTS access_log ( type security_log (line 15) | CREATE TABLE IF NOT EXISTS security_log ( FILE: database/create_mssql_db.sql type users (line 9) | CREATE TABLE users (user_id INT PRIMARY KEY,first_name VARCHAR(15),last_... type guestbook (line 13) | CREATE TABLE guestbook (comment_id INT IDENTITY(1,1) FILE: database/create_oracle_db.sql type users (line 3) | CREATE TABLE users ( type guestbook (line 15) | CREATE TABLE guestbook FILE: database/create_postgresql_db.sql type users (line 1) | CREATE TABLE users (user_id INT PRIMARY KEY,first_name VARCHAR(15),last_... type guestbook (line 5) | CREATE TABLE guestbook (comment_id serial PRIMARY KEY, comment VARCHAR(3... FILE: database/create_sqlite_db.sql type `users` (line 1) | CREATE TABLE `users` ( type `guestbook` (line 13) | CREATE TABLE `guestbook` ( FILE: dvwa/includes/Parsedown.php class Parsedown (line 16) | class Parsedown method text (line 24) | function text($text) method textElements (line 37) | protected function textElements($text) method setBreaksEnabled (line 59) | function setBreaksEnabled($breaksEnabled) method setMarkupEscaped (line 68) | function setMarkupEscaped($markupEscaped) method setUrlsLinked (line 77) | function setUrlsLinked($urlsLinked) method setSafeMode (line 86) | function setSafeMode($safeMode) method setStrictMode (line 95) | function setStrictMode($strictMode) method lines (line 162) | protected function lines(array $lines) method linesElements (line 167) | protected function linesElements(array $lines) method extractElement (line 319) | protected function extractElement(array $Component) method isBlockContinuable (line 336) | protected function isBlockContinuable($Type) method isBlockCompletable (line 341) | protected function isBlockCompletable($Type) method blockCode (line 349) | protected function blockCode($Line, $Block = null) method blockCodeContinue (line 374) | protected function blockCodeContinue($Line, $Block) method blockCodeComplete (line 395) | protected function blockCodeComplete($Block) method blockComment (line 403) | protected function blockComment($Line) method blockCommentContinue (line 428) | protected function blockCommentContinue($Line, array $Block) method blockFencedCode (line 448) | protected function blockFencedCode($Line) method blockFencedCodeContinue (line 502) | protected function blockFencedCodeContinue($Line, $Block) method blockFencedCodeComplete (line 531) | protected function blockFencedCodeComplete($Block) method blockHeader (line 539) | protected function blockHeader($Line) method blockList (line 574) | protected function blockList($Line, array $CurrentBlock = null) method blockListContinue (line 643) | protected function blockListContinue($Line, array $Block) method blockListComplete (line 729) | protected function blockListComplete(array $Block) method blockQuote (line 748) | protected function blockQuote($Line) method blockQuoteContinue (line 767) | protected function blockQuoteContinue($Line, array $Block) method blockRule (line 792) | protected function blockRule($Line) method blockSetextHeader (line 811) | protected function blockSetextHeader($Line, array $Block = null) method blockMarkup (line 829) | protected function blockMarkup($Line) method blockMarkupContinue (line 857) | protected function blockMarkupContinue($Line, array $Block) method blockReference (line 872) | protected function blockReference($Line) method blockTable (line 897) | protected function blockTable($Line, array $Block = null) method blockTableContinue (line 1020) | protected function blockTableContinue($Line, array $Block) method paragraph (line 1078) | protected function paragraph($Line) method paragraphContinue (line 1093) | protected function paragraphContinue($Line, array $Block) method line (line 1130) | public function line($text, $nonNestables = array()) method lineElements (line 1135) | protected function lineElements($text, $nonNestables = array()) method inlineText (line 1239) | protected function inlineText($text) method inlineCode (line 1258) | protected function inlineCode($Excerpt) method inlineEmailTag (line 1277) | protected function inlineEmailTag($Excerpt) method inlineEmphasis (line 1307) | protected function inlineEmphasis($Excerpt) method inlineEscapeSequence (line 1342) | protected function inlineEscapeSequence($Excerpt) method inlineImage (line 1353) | protected function inlineImage($Excerpt) method inlineLink (line 1388) | protected function inlineLink($Excerpt) method inlineMarkup (line 1463) | protected function inlineMarkup($Excerpt) method inlineSpecialCharacter (line 1495) | protected function inlineSpecialCharacter($Excerpt) method inlineStrikethrough (line 1509) | protected function inlineStrikethrough($Excerpt) method inlineUrl (line 1532) | protected function inlineUrl($Excerpt) method inlineUrlTag (line 1560) | protected function inlineUrlTag($Excerpt) method unmarkedText (line 1581) | protected function unmarkedText($text) method handle (line 1591) | protected function handle(array $Element) method handleElementRecursive (line 1627) | protected function handleElementRecursive(array $Element) method handleElementsRecursive (line 1632) | protected function handleElementsRecursive(array $Elements) method elementApplyRecursive (line 1637) | protected function elementApplyRecursive($closure, array $Element) method elementApplyRecursiveDepthFirst (line 1653) | protected function elementApplyRecursiveDepthFirst($closure, array $El... method elementsApplyRecursive (line 1669) | protected function elementsApplyRecursive($closure, array $Elements) method elementsApplyRecursiveDepthFirst (line 1679) | protected function elementsApplyRecursiveDepthFirst($closure, array $E... method element (line 1689) | protected function element(array $Element) method elements (line 1773) | protected function elements(array $Elements) method li (line 1803) | protected function li($lines) method pregReplaceElements (line 1825) | protected static function pregReplaceElements($regexp, $Elements, $text) method parse (line 1854) | function parse($text) method sanitiseElement (line 1861) | protected function sanitiseElement(array $Element) method filterUnsafeUrlInAttribute (line 1900) | protected function filterUnsafeUrlInAttribute(array $Element, $attribute) method escape (line 1919) | protected static function escape($text, $allowQuotes = false) method striAtStart (line 1924) | protected static function striAtStart($string, $needle) method instance (line 1938) | static function instance($name = 'default') FILE: dvwa/includes/dvwaPage.inc.php function dvwa_start_session (line 45) | function dvwa_start_session() { function dvwaSessionGrab (line 124) | function &dvwaSessionGrab() { function dvwaPageStartup (line 132) | function dvwaPageStartup( $pActions ) { function dvwaLogin (line 140) | function dvwaLogin( $pUsername ) { function dvwaIsLoggedIn (line 146) | function dvwaIsLoggedIn() { function dvwaLogout (line 157) | function dvwaLogout() { function dvwaPageReload (line 163) | function dvwaPageReload() { function dvwaCurrentUser (line 172) | function dvwaCurrentUser() { function dvwaPageNewGrab (line 179) | function &dvwaPageNewGrab() { function dvwaThemeGet (line 192) | function dvwaThemeGet() { function dvwaSecurityLevelGet (line 200) | function dvwaSecurityLevelGet() { function dvwaSecurityLevelSet (line 218) | function dvwaSecurityLevelSet( $pSecurityLevel ) { function dvwaLocaleGet (line 230) | function dvwaLocaleGet() { function dvwaSQLiDBGet (line 235) | function dvwaSQLiDBGet() { function dvwaLocaleSet (line 240) | function dvwaLocaleSet( $pLocale ) { function dvwaMessagePush (line 252) | function dvwaMessagePush( $pMessage ) { function dvwaMessagePop (line 261) | function dvwaMessagePop() { function messagesPopAllToHtml (line 270) | function messagesPopAllToHtml() { function dvwaHtmlEcho (line 281) | function dvwaHtmlEcho( $pPage ) { function dvwaHelpHtmlEcho (line 455) | function dvwaHelpHtmlEcho( $pPage ) { function dvwaSourceHtmlEcho (line 491) | function dvwaSourceHtmlEcho( $pPage ) { function dvwaExternalLinkUrlGet (line 527) | function dvwaExternalLinkUrlGet( $pLink,$text=null ) { function dvwaButtonHelpHtmlGet (line 537) | function dvwaButtonHelpHtmlGet( $pId ) { function dvwaButtonSourceHtmlGet (line 544) | function dvwaButtonSourceHtmlGet( $pId ) { function dvwaDatabaseConnect (line 562) | function dvwaDatabaseConnect() { function dvwaRedirect (line 603) | function dvwaRedirect( $pLocation ) { function dvwaGuestbook (line 610) | function dvwaGuestbook() { function checkToken (line 634) | function checkToken( $user_token, $session_token, $returnURL ) { # Vali... function generateSessionToken (line 647) | function generateSessionToken() { # Generate a brand new (CSRF) token function destroySessionToken (line 654) | function destroySessionToken() { # Destroy any session with the name 's... function tokenField (line 658) | function tokenField() { # Return a field for the (CSRF) token FILE: dvwa/js/add_event_listeners.js function addEventListeners (line 4) | function addEventListeners() { FILE: dvwa/js/dvwaPage.js function popUp (line 3) | function popUp(URL) { function validate_required (line 12) | function validate_required(field,alerttxt) function validateGuestbookForm (line 24) | function validateGuestbookForm(thisform) { function confirmClearGuestbook (line 37) | function confirmClearGuestbook() { function toggleTheme (line 41) | function toggleTheme() { FILE: external/recaptcha/recaptchalib.php function recaptcha_check_answer (line 5) | function recaptcha_check_answer($key, $response){ function CheckCaptcha (line 9) | function CheckCaptcha($key, $response) { function recaptcha_get_html (line 38) | function recaptcha_get_html($pubKey){ FILE: tests/test_url.py function get_php_files (line 7) | def get_php_files(): function get_urls (line 19) | def get_urls(filename): function check_once (line 26) | def check_once(url): function check (line 39) | def check(url): function test_url (line 51) | def test_url(): FILE: vulnerabilities/api/src/GenericController.php class GenericController (line 11) | class GenericController method __construct (line 16) | public function __construct($command) { method optionsResponse (line 20) | private function optionsResponse() { method unprocessableEntityResponse (line 26) | private function unprocessableEntityResponse() method notFoundResponse (line 35) | private function notFoundResponse() { method methodNotSupported (line 41) | private function methodNotSupported() { method teapotResponse (line 47) | private function teapotResponse() { method processRequest (line 53) | public function processRequest() { FILE: vulnerabilities/api/src/HealthController.php class HealthController (line 11) | class HealthController method __construct (line 16) | public function __construct($requestMethod, $version, $command) { method echo (line 21) | #[OAT\Post( method checkConnectivity (line 59) | #[OAT\Post( method getStatus (line 104) | #[OAT\Get( method ping (line 124) | #[OAT\Get( method processRequest (line 143) | public function processRequest() { class Target (line 189) | #[OAT\Schema(required: ['target'])] class Words (line 195) | #[OAT\Schema(required: ['words'])] FILE: vulnerabilities/api/src/Helpers.php class Helpers (line 5) | class Helpers { method check_content_type (line 6) | public static function check_content_type() { FILE: vulnerabilities/api/src/Login.php class Login (line 7) | class Login method create_token (line 14) | public static function create_token() { method check_access_token (line 26) | public static function check_access_token($token) { method check_refresh_token (line 39) | public static function check_refresh_token($token) { FILE: vulnerabilities/api/src/LoginController.php class LoginController (line 7) | class LoginController method __construct (line 12) | public function __construct($requestMethod, $version, $command) { method loginJSON (line 20) | #[OAT\Post( method login (line 75) | private function login() { method refresh (line 149) | private function refresh() { method check_token (line 181) | #[OAT\Post( method processRequest (line 232) | public function processRequest() { class Credentials (line 267) | #[OAT\Schema(required: ['username', 'password'])] FILE: vulnerabilities/api/src/Order.php class Order (line 14) | #[OAT\Schema()] method __construct (line 32) | function __construct ($id, $name, $address, $items, $status) { method toArray (line 43) | public function toArray($version) { class OrderAdd (line 56) | #[OAT\Schema(required: ['level', 'name'])] class OrderUpdate (line 69) | #[OAT\Schema()] FILE: vulnerabilities/api/src/OrderController.php class OrderController (line 7) | class OrderController method __construct (line 13) | public function __construct($requestMethod, $version, $orderId) { method checkToken (line 24) | private function checkToken() { method validateAdd (line 38) | private function validateAdd($input) method validateUpdate (line 52) | private function validateUpdate($input) method getOrder (line 65) | #[OAT\SecurityScheme( method getAllOrders (line 114) | #[OAT\Get( method addOrder (line 148) | #[OAT\Post( method updateOrder (line 198) | #[OAT\Put( method deleteOrder (line 265) | #[OAT\Delete( method processRequest (line 304) | public function processRequest() { FILE: vulnerabilities/api/src/Token.php class Token (line 7) | #[OAT\Schema(required: ['token'])] method __construct (line 19) | public function __construct () { method encrypt (line 22) | private static function encrypt($cleartext) { method decrypt (line 30) | private static function decrypt($ciphertext) { method create_token (line 42) | public function create_token($secret, $expires) { method decrypt_token (line 50) | public function decrypt_token($token) { FILE: vulnerabilities/api/src/User.php class User (line 14) | #[OAT\Schema()] method __construct (line 28) | function __construct ($id, $name, $level, $password) { method toArray (line 38) | public function toArray($version) { class UserAdd (line 62) | #[OAT\Schema(required: ['level', 'name'])] class UserUpdate (line 72) | #[OAT\Schema(required: ['name'])] FILE: vulnerabilities/api/src/UserController.php class UserController (line 8) | #[OAT\Info(title: "DVWA API", version: "0.1")] method __construct (line 29) | public function __construct($requestMethod, $version, $userId) { method validateAdd (line 40) | private function validateAdd($input) method validateUpdate (line 54) | private function validateUpdate($input) method getUser (line 62) | #[OAT\Get( method getAllUsers (line 97) | #[OAT\Get( method addUser (line 125) | #[OAT\Post( method updateUser (line 174) | #[OAT\Put( method deleteUser (line 232) | #[OAT\Delete( method processRequest (line 265) | public function processRequest() { FILE: vulnerabilities/authbypass/authbypass.js function show_save_result (line 1) | function show_save_result (data) { function submit_change (line 9) | function submit_change(id) { function populate_form (line 26) | function populate_form() { FILE: vulnerabilities/bac/index.php function setupRequiredTables (line 18) | function setupRequiredTables() FILE: vulnerabilities/bac/source/impossible.php function isRateLimitExceeded (line 143) | function isRateLimitExceeded($user_id) function logAccessAttempt (line 182) | function logAccessAttempt($user_id, $target_id, $action) function logSecurityEvent (line 217) | function logSecurityEvent($action, $target_id, $user_id, $details = '') function checkForSuspiciousActivity (line 263) | function checkForSuspiciousActivity($user_id, $target_id) FILE: vulnerabilities/cryptography/source/ecb_attack.php function encrypt (line 2) | function encrypt ($plaintext, $key) { function decrypt (line 9) | function decrypt ($ciphertext, $key) { FILE: vulnerabilities/cryptography/source/low.php function xor_this (line 3) | function xor_this($cleartext, $key) { FILE: vulnerabilities/cryptography/source/medium.php function decrypt (line 2) | function decrypt ($ciphertext, $key) { FILE: vulnerabilities/cryptography/source/oracle_attack.php function xor_byte_array (line 5) | function xor_byte_array ($a1, $a2) { function byte_array_to_string (line 16) | function byte_array_to_string ($array) { function zero_array (line 24) | function zero_array($length) { function make_call (line 32) | function make_call ($token, $iv, $url = null) { function do_attack (line 84) | function do_attack ($iv_string_b64, $token, $url) { FILE: vulnerabilities/cryptography/source/token_library_high.php function encrypt (line 7) | function encrypt ($plaintext, $iv) { function decrypt (line 22) | function decrypt ($ciphertext, $iv) { function create_token (line 36) | function create_token ($debug = false) { function check_token (line 53) | function check_token ($data) { FILE: vulnerabilities/cryptography/source/token_library_impossible.php function encrypt (line 6) | function encrypt ($plaintext, $iv) { function decrypt (line 21) | function decrypt ($ciphertext, $iv) { function create_token (line 39) | function create_token () { function check_token (line 51) | function check_token ($data) { FILE: vulnerabilities/cryptography/source/xor_theory.php function xor_this (line 3) | function xor_this($cleartext, $key) { FILE: vulnerabilities/csp/source/high.js function clickButton (line 1) | function clickButton() { function solveSum (line 7) | function solveSum(obj) { FILE: vulnerabilities/csp/source/impossible.js function clickButton (line 1) | function clickButton() { function solveSum (line 7) | function solveSum(obj) { FILE: vulnerabilities/help.js function show_answer (line 1) | function show_answer(which) { FILE: vulnerabilities/javascript/source/high_unobfuscated.js function Sha256 (line 127) | function Sha256(is224, sharedMemory) { function HmacSha256 (line 429) | function HmacSha256(key, is224, sharedMemory) { function do_something (line 520) | function do_something(e){for(var t="",n=e.length-1;n>=0;n--)t+=e[n];retu... function token_part_3 (line 522) | function token_part_3(t, y="ZZ") { function token_part_2 (line 526) | function token_part_2(e="YY") { function token_part_1 (line 530) | function token_part_1(a,b) { FILE: vulnerabilities/javascript/source/medium.js function do_something (line 1) | function do_something(e){for(var t="",n=e.length-1;n>=0;n--)t+=e[n];retu... function do_elsesomething (line 1) | function do_elsesomething(e){document.getElementById("token").value=do_s...