orf / xcat

XPath injection tool
https://xcat.readthedocs.org/
MIT License
363 stars 73 forks source link

Add support for tamper scripts #32

Closed acru3l closed 4 years ago

acru3l commented 4 years ago

A tamper function is called just before each request is issued from the check function. This is useful if you need to refresh a logged in session every time check is called, or maybe if you need to modify arguments to bypass WAF. A tamper function takes two arguments: context and args, and can modify them in-place.

orf commented 4 years ago

Thanks for this!