fcavallarin / htcap

htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
GNU General Public License v2.0
610 stars 114 forks source link

aggressive mode does not fill input values #68

Closed notwhy closed 4 years ago

notwhy commented 4 years ago

Hello . Thanks for the wonderful tools When see the document i found something follow. The aggressive mode makes htcap to also fill input values and post forms. This simulates a user that performs as many actions as possible on the page. But when i test for a login form it does not fill input values. like this python htcap.py crawl -v http://1.1.1.1:8080/ target.db Initializing . . . done Database target-5.db initialized, crawl started with 10 threads (^C to pause or change verbosity) crawl result for: link GET http://1.1.1.1:8080/ new request found form POST http://1.1.1.1:8080/login name=&pwd=&code= crawl result for: form POST http://1.1.1.1:8080/login name=&pwd=&code=

What i think it should like this name=aaa&pwd=aaa&code=111 is anything wrong?