Open JaveleyQAQ opened 1 year ago
Hi
It looks like you're using run for each
when you don't need to be.
Could you try the following instead?
define:
user = {random_str(5)}
nacos_detect =
`/nacos/v1/auth/users?username={user}&password={user}`
an example of this approach is here - https://github.com/PortSwigger/BChecks/blob/main/examples/log4shell.bcheck
I just want to point out that this is an issue, define cannot be used together with backticks in "run for each:" @olliewuk @Hannah-PortSwigger
@JaveleyQAQ this is today how the language is designed to work. The for each
is the outer scope whilst the define
is inner scope. We are exploring what we might do to further evolve the language and/or compiler behaviour here.
@JaveleyQAQ this is today how the language is designed to work. The
for each
is the outer scope whilst thedefine
is inner scope. We are exploring what we might do to further evolve the language and/or compiler behaviour here.
I understand now, I thought the variables were global.
run for each doesn't work 😀