Skip to content
This repository was archived by the owner on Aug 31, 2023. It is now read-only.

Conversation

@Webklex
Copy link

@Webklex Webklex commented Sep 19, 2022

I extended the "extract" part of the http module in order to make it possible to extract data from the response header and added a missing file extension to one of the examples.

@Webklex
Copy link
Author

Webklex commented Sep 19, 2022

I also added support to allow template variables within parameter.url and parameter.method.

@Webklex
Copy link
Author

Webklex commented Sep 19, 2022

..and the option to chain cookies from multiple responses.
For example:

name: login
description: login with test credentials
module: http
parameter:
    url: http://example.com/login
    method: POST
    body:
        username: user
        password: password
---
name: something_else
description: Do something else
module: http
parameter:
    url: http://example.com/something
    method: GET
---
name: exploit
description: exploit as the logged in user
module: http
parameter:
    url: http://example.com/profile
    method: POST
    body:
        inject: "'Foobar"
    cookies: login.response.cookies,something_else.response.cookies
    find: You have an error in your SQL syntax

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant