search

iclab / centinel

http://iclab.org/
MIT License
34 stars 17 forks source link

Base64 encoded body contents are not decoded before being passed to redirect finder #258

Closed rpanah closed 7 years ago

rpanah commented 8 years ago

Line 107 and 156 of centinel/primitives/http.py don't decode the body contents, neither does the function.

    if "body" in first_response["response"]:
        meta_redirect_url = meta_redirect(first_response["response"]["body"])
    elif "body.b64" in first_response["response"]:
        meta_redirect_url = meta_redirect(first_response["response"]["body.b64"])