added token extractor

patch-12
Ritik Chaddha 2024-09-25 15:42:44 +04:00 committed by GitHub
parent 8b80f1e06d
commit 5380fdcfa9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 1 deletions

View File

@ -34,7 +34,7 @@ http:
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
set_session={{session}}&pma_username=%0D%0Atest:crlfinjection=1%0D%0A&pma_password=%0D%0Atest:crlfinjection=1%0D%0A&server=1&route=%2F&lang=en&token=4725334b3c5b516e4b537c356178426a
set_session={{session}}&pma_username=%0D%0Atest:crlfinjection=1%0D%0A&pma_password=%0D%0Atest:crlfinjection=1%0D%0A&server=1&route=%2F&lang=en&token={{token}}
matchers-condition: and
matchers:
@ -55,3 +55,11 @@ http:
regex:
- 'name="set_session" value="([a-z0-9]+)"'
internal: true
- type: regex
part: body
name: token
group: 1
regex:
- 'name="token" value="([a-z0-9]+)"'
internal: true