-
Notifications
You must be signed in to change notification settings - Fork 13
/
Copy pathBappDescription.html
33 lines (25 loc) · 1.37 KB
/
BappDescription.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
<p>A simple but useful extension to increment a parameter in each request, intended for use with Active Scan.</p>
<p>An example use case would be if you are active scanning a "create user" form, which would normally produce an error if you created two users with the same username. You can use the text "IncrementMePlease" for the username parameter parameter and it will replace it with "Incremented[RandomInt][Counter]", so that you can successfully active scan this form.</p>
<p>It will match:</p>
<blockquote><code>{"name":"IncrementMePlease"}</code></blockquote>
<p>And replace it with:</p>
<blockquote><code>{"name":"Incremented291706"}<br>
...<br>
{"name":"Incremented291707"}<br>
...</code></blockquote>
<p>Specific data types (Integer, GUID, and Float) can be generated by specifying the following:</p>
<blockquote><code><li>GUIDMePlease</li><li>FloatMePlease</li><li>IntMePlease</li></code></blockquote>
<p>The following example request shows all functionality:</p>
<blockquote><code>
GET / HTTP/1.1<br>
Increment: IncrementMePlease<br>
Guid: GUIDMePlease<br>
Float: FloatMePlease<br>
Int: IntMePlease</code></blockquote>
<p>Which will send the following HTTP request:</p>
<blockquote><code>
GET / HTTP/1.1<br>
Increment: Incremented950<br>
Guid: 1ae3d048-203d-4e82-9d61-e8b4478ee98c<br>
Float: 0.0<br>
Int: 0 </code></blockquote>