Description
This plugin will find response splitting vulnerabilities. The detection is done by sending “w3af\r\nVulnerable: Yes” to every injection point, and reading the response headers searching for a header with name “Vulnerable” and value “Yes”.
Plugin type
Options
This plugin doesn’t have any user configured options.
Source
For more information about this plugin and the associated tests, there’s always the source code to understand exactly what’s under the hood:
Plugin source code
Unittest source code
Dependencies
This plugin has no dependencies.
