hhucn / webvulnscan

automated web application vulnerability scanner
MIT License
38 stars 27 forks source link

Authentication via form fill #17

Closed rliebig closed 11 years ago

rliebig commented 11 years ago

This should allow the user to instead of a specifing a post target, allow him to set a site, specify the form and filling some inputs manually. This could be handy to avoid CSRF-Tokens in application. As Example:

$ python -m webvulnscan --form-page http://test/login --form-id login --form-data field=value
rliebig commented 11 years ago

Done via https://github.com/hhucn/webvulnscan/commit/c4e04ef3ec2673d8292da82aa1231835107c4fe8