search

orf / xcat

XPath injection tool
https://xcat.readthedocs.org/
MIT License
363 stars 73 forks source link

Error with sending POST content #31

Open Tester0940 opened 5 years ago

Tester0940 commented 5 years ago

Hello,

I have following problem - I can't specify content which should be send via POST method.

Here are example parameters which I used: xcat.exe run http://127.0.0.1:8080/aaaa --true-string "asd" asd asd=z --body=body.txt --encode=form

I have this error: Error: Can only use --body with url encoding

Do you have any ideas how can I resolve this error ?

Second question is: Is possible to provide injection point into POST body - not only via GET method ?

Thanks in advance !

init5-SF commented 3 years ago

I have the exact same issue!

gjm-anban commented 2 years ago

same issue too

CyberYeagerist commented 2 years ago

You guys may have missed a few arguments as well there is a possibility like it was in my case that --encode=url was not actually a url but form (stupid of me simple mistake :x). This is the command that worked for me prior I used the same command as @Tester0940:

xcat run -m POST http://example.com/somefile.php email "email=foo-bar%40example.com' or '1'='1" --true-string=someString -e FORM