Skip to content

Commit 752a001

Browse files
committed
update suggested text
1 parent ee7286d commit 752a001

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

BappDescription.html

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,8 +31,8 @@ <h1 id="sample-run">Sample Run</h1>
3131
<li><a href="https://raw.githubusercontent.com/drewnoakes/metadata-extractor-images/master/jpg/Panasonic%20DMC-TZ10.jpg">Panasonic DMC-TZ10</a> shows proprietary Panasonic tags including city, state, country along with facial recognition information, like the name and age of the person in the picture.</li>
3232
</ul>
3333
</li>
34-
<li>This professional photographer leaves Exif & IPTC data in many photos: <a href="https://raia.com/">Raia.com</a></li>
34+
<li>This professional photographer utilizes Exif & IPTC data in many of the full-sized (non-thumbnail) photos: <a href="https://raia.com/">Raia.com</a></li>
3535
</ul>
3636

37-
<p>Keywords: Infosec, Audit, Information Exposure, Vulnerability, GPS, Exif, IPTC, PII, OpSec
37+
<p>Keywords: Infosec, Audit, Information Exposure, Data Leakage, Vulnerability, GPS, Exif, IPTC, PII, OpSec, Privacy
3838
</p>

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ below, you may need to obtain a GitHub session cookie first by going to
4242
with facial recognition information, like the name and age of the person in
4343
the picture. Burp screen shot of this shown to the right and ZAP is
4444
shown below.
45-
* This professional photographer leaves Exif & IPTC data in many photos: [Raia.com](https://raia.com/)
45+
* This professional photographer utilizes Exif & IPTC data in many of the full-sized (non-thumbnail) photos: [Raia.com](https://raia.com/)
4646

4747
<p align="center"><img width="65%" height="65%"
4848
src="img/screenshot-2-zap.png" align="center"/></p>
@@ -186,7 +186,7 @@ The Burp plug-in is built with Gradle: `gradle fatJar` (or be lazy and type `mak
186186

187187
To build for ZAP, it is easiest start by forking [ZAP Extensions](https://github.com/zaproxy/zap-extensions) or [my outdated repo](https://github.com/veggiespam/zap-extensions). Then, overwrite your repo's ILS.java with the updated version. Compile with `./gradlew :addOns:imagelocationscanner:build` and install *imagelocationscanner-{id}.zap* add-on file into ZAP.
188188

189-
Keywords: Infosec, Burp, ZAP, Audit, Information Exposure, Vulnerability, GPS, Exif, IPTC, PII, OpSec, Privacy
189+
Keywords: Infosec, Burp, ZAP, Audit, Information Exposure, Data Leakage, Vulnerability, GPS, Exif, IPTC, PII, OpSec, Privacy
190190

191191
<!--
192192
vim: sw=4 ts=4 sts=4 spell expandtab

src/burp/BurpExtender.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@ public List<IScanIssue> doPassiveScan(IHttpRequestResponse baseRequestResponse)
109109
// We search a set of Burp's inferred mimetypes, this mimeList will be user configurable in the future.
110110

111111
if ( mimeList.contains(mimeInferred) || mimeList.contains(mimeStated) || mimeList.contains(extension) ) {
112-
db("Probably image file, scanning for data leakage via ILS.scanForLocationInImageHTML().");
112+
db("Probably image file, scanning for data leakage via ILS.scanForLocationInImageHTML()");
113113
byte[] resp = baseRequestResponse.getResponse();
114114
int responseOffset = helpers.analyzeResponse(resp).getBodyOffset();
115115
//String responseBody = new String(baseRequestResponse.getResponse()).substring(responseOffset);

0 commit comments

Comments
 (0)