benteveo-kiwi / benteveo-toolbox

A burp extension that allows for IDOR testing and facilitates automatic scanning.
1 stars 0 forks source link

ScannerInsertionPoint performing URL encoding #31

Open SamJoan opened 4 years ago

SamJoan commented 4 years ago

ScannerInsertionPoint currently performs URL encoding. . Some extensions, such as SHELLING, also perform encoding. This will result in redundant encoding taking place, which will result in false negatives.

We need to consider whether and how to fix this.