'Search for IP addresses in HTTP headers'

def _analyze_headers(self, request, response):

    headers_string = response.dump_headers()
    for regex in self.RE_LIST:
        for ip_address in regex.findall(headers_string):
            ip_address = ip_address.strip()
            if (ip_address in self._ignore_if_match):
                continue
            header_name = self._get_header_name(response, ip_address, regex)
            desc = 'The    URL    "%s"    returned    the    private    IP    address:    "%s"    in    the    HTTP    response    header    "%s"'
            desc = (desc % (response.get_url(), ip_address, header_name))
            v = Vuln('Private    IP    disclosure    vulnerability', desc, severity.LOW, response.id, self.get_name())
            v.set_url(response.get_url())
            v.add_to_highlight(ip_address)
            v['ip_address'] = ip_address
            v['header_name'] = header_name
            v[HeaderPrivateIPInfoSet.ITAG] = (ip_address, header_name)
            self.kb_append_uniq_group(self, 'header', v, group_klass=HeaderPrivateIPInfoSet)
