Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

path + query automerge support for query fuzzing in http and headless protocol #3952

Closed
Tracked by #4795
ehsandeep opened this issue Jul 19, 2023 · 0 comments
Closed
Tracked by #4795
Assignees
Labels
Type: Enhancement Most issues will probably ask for additions or changes.

Comments

@ehsandeep
Copy link
Member

Please describe your feature request:

Based on #3922

Describe the use case of this feature:

Template:

id: fuzz-automerge

info:
  name: testing fuzzing automerge
  author: pdteam
  severity: info

http:
  - method: GET
    path:
      - "{{BaseURL}}/tags?a=b"

    payloads:
      reflection:
        - "test2"

    fuzzing:
      - part: query
        type: replace
        mode: single
        fuzz:
          - "{{reflection}}"

Example run:

echo https://example.com/testing | nuclei -t test.yaml

Expected output:

[VER] [fuzz-automerge] Sent HTTP request to https://example.com/testing/tags?a=test2

This applies to http + headless protocol (related #3919)

@ehsandeep ehsandeep added Type: Enhancement Most issues will probably ask for additions or changes. headless labels Jul 19, 2023
@tarunKoyalwar tarunKoyalwar self-assigned this Jul 19, 2023
@ehsandeep ehsandeep added Priority: High After critical issues are fixed, these should be dealt with before any further issues. http http protocol labels Jul 31, 2023
@tarunKoyalwar tarunKoyalwar removed Priority: High After critical issues are fixed, these should be dealt with before any further issues. headless http http protocol labels Feb 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Enhancement Most issues will probably ask for additions or changes.
Projects
None yet
Development

No branches or pull requests

2 participants