proabiral / inception

A highly configurable Framework for easy automated web scanning
357 stars 66 forks source link

Feature request: POST vs GET #16

Closed geeknik closed 5 years ago

geeknik commented 5 years ago

Would it be feasible to add a command line switch like -post so that it sends POST requests instead of GET requests? Thank you.

proabiral commented 5 years ago

Hey, I have been working on this lately. Will probably publish it on first week of September.

proabiral commented 5 years ago

Hi @geeknik , I have added the feature to support http method and body. Please check out this commit.

geeknik commented 5 years ago

There is a good possibility I'm doing something wrong, but I'm not seeing any requests against my host if I use POST, PUT or DELETE.

proabiral commented 5 years ago

Hi @geeknik ,

Few things you might be doing wrong : 1) Since the code is not pushed to master branch yet. You need to pull it from beta branch and run from there. https://github.com/proabiral/inception/tree/beta 2) Methods are not taken from command line argument but taken from provider.json. The provider needs to be created from providerCreate.html here. The old one here is not yet updated.

Please feel free to let me know if there are any trouble.

geeknik commented 5 years ago

Yes, yes.

Here is the provider.json that I created just as a test to see how the request looked on a local server of mine.

[
    {
        "vulnerability": "test",
        "method": "POST",
        "color": "red",
        "body": "{test:1}",
        "endpoint": [
            "/"
        ],
        "headers": [
            [
                "test",
                "1"
            ]
        ],
        "checkIn": "responseBody",
        "checkFor": "test:1"
    }
]

No request appears in /var/log/nginx/access.log or /var/log/nginx/error.log

proabiral commented 5 years ago

The provider.json is working fine as I am receiving desired request using it. Can you try using requestbin ?

geeknik commented 5 years ago

Turned out to be a silly local problem. Haha. Thanks for adding this great feature. Do you have a donation box somewhere?