1.8. encoded parameter injector

1.8. encoded parameter injector

this feature is enable to inject pattern to encoded value such as base64 encoded value. you can decode parameter which has encoded value in messageView window and then embeding attack pattern to decoded value on scanning

usage

1. decoding parameter

1. select request in sitemap or history tab and add to macrobuilder
2. In the RequestRecorder work panel, select request and right-click to popup menu then select messageView
3. In messageView, select parameter value which you want to decode
4. right+click to popup menu then select Decode
5. decode dialog is displayed. In decode dialog, select encoded type which you want to decode value.
6. click ok to close dialog,
7. In messageView, encoded parameter value is displayed within special pseudo tags
8. right+click to popup menu then select Update(You must do this Update action before start scanning.).

2.sendmessage with decoded parameter

In messageView.right+click to popup menu and then select SendMessage

3.scanning with decoded parameter

1. In the RequestRecorder work panel or status panel(messageView), right+click to popup menu and then select Scan
2. In Scan dialg, click DecodeVector tab.
3. insert injection vector position which is the same like CustomVector tab.
4. click start scan