Skip to content
This repository has been archived by the owner on Aug 31, 2023. It is now read-only.

Make header names and values extractable #9

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

Webklex
Copy link

@Webklex Webklex commented Sep 19, 2022

I extended the "extract" part of the http module in order to make it possible to extract data from the response header and added a missing file extension to one of the examples.

@Webklex
Copy link
Author

Webklex commented Sep 19, 2022

I also added support to allow template variables within parameter.url and parameter.method.

@Webklex
Copy link
Author

Webklex commented Sep 19, 2022

..and the option to chain cookies from multiple responses.
For example:

name: login
description: login with test credentials
module: http
parameter:
    url: http://example.com/login
    method: POST
    body:
        username: user
        password: password
---
name: something_else
description: Do something else
module: http
parameter:
    url: http://example.com/something
    method: GET
---
name: exploit
description: exploit as the logged in user
module: http
parameter:
    url: http://example.com/profile
    method: POST
    body:
        inject: "'Foobar"
    cookies: login.response.cookies,something_else.response.cookies
    find: You have an error in your SQL syntax

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant