bebiksior / EvenBetter

EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎
123 stars 6 forks source link

Quick SSRF max token length bug on interactsh custom server #57

Open stealthcopter opened 1 month ago

stealthcopter commented 1 month ago

It looks like when using a custom interactsh server that there is a maximum length for the provided token.

Using a server with a token like one of the following works:

abc123
a1234567-abc1

But using a token like on of the following:

2de6a006-53f111efb29ddffa9ef236d9
2de6a006-53f1-11ef-b29d-dffa9ef236d9

Does not work. When clicking the refresh button to create a new server it gets 'Failed to create interactsh instance'.

I tried having a look at the source code but could not see any obvious reason why there would be a limit. If it's not possible to fix perhaps a warning / error message could be displayed on the token field when entering one that it too long.

Thanks

bebiksior commented 1 month ago

Hey, thanks for reporting this. Will try to fix this issue in the next release