added ExactDelay object for NodeJS vuln checking andresriancho#9635

ning1022 · Jan 17, 2016 · 2488fb2 · 2488fb2
1 parent 6ff09cb
commit 2488fb2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/w3af/plugins/audit/eval.py b/w3af/plugins/audit/eval.py
@@ -70,7 +70,9 @@ class eval(AuditPlugin):
         # ASP.NET also uses miliseconds
         # http://msdn.microsoft.com/en-us/library/d00bd51t.aspx
         # Note: The Sleep in ASP.NET is uppercase
-        ExactDelay("Thread.Sleep(%s);", mult=1000)
+        ExactDelay("Thread.Sleep(%s);", mult=1000),
+        # NodeJS eval
+        ExactDelay("var cd;var d=new Date();do{cd=new Date();}while(cd-d<%s)", mult=1000)
     )
 
     def __init__(self):