epinna / tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool
GNU General Public License v3.0
3.81k stars 675 forks source link

Is this awesome tools provide witting a log? #120

Open bughunter11o1 opened 11 months ago

bughunter11o1 commented 11 months ago

Hello creator, fantastic work!

Does this tool include a login feature for writing a file in case the provided URL is vulnerable? As a beginner bug-bounty hunter, I rely on this tool to automate SSTI tests. However, the current process requires me to constantly check the terminal, scrolling from the beginning to the end.

If the tool doesn't have a logging feature yet, when can we anticipate its addition?

Appreciate it!

0x00650a commented 3 months ago

Hello creator, fantastic work!

Does this tool include a login feature for writing a file in case the provided URL is vulnerable? As a beginner bug-bounty hunter, I rely on this tool to automate SSTI tests. However, the current process requires me to constantly check the terminal, scrolling from the beginning to the end.

If the tool doesn't have a logging feature yet, when can we anticipate its addition?

Appreciate it!

Of course it has logging enabled, just check the '/home/user/.tplmap/tplmap.log' file.

Note: If you are using the tool in docker try to either: