Ability to set path as the injection point ?

epinna / tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

GNU General Public License v3.0

3.75k stars 670 forks source link

Ability to set path as the injection point ? #86

Closed adityathebe closed 3 years ago

adityathebe commented 3 years ago

Pardon me if this is already possible.

From my brief usage of this tool I understand that it uses the GET query params or the POST data params as the injection point.

However, is it possible to use the url path as the injection point ?

ebarti commented 3 years ago

I have just started using this project like 5 mins ago, but I think I was successful at injecting on URLs by using an asterisk where I want to inject:

./tplmap.py -u 'http://blablabla.com/*'