Option to disable URL encoding

simioni87 / auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

MIT License

182 stars 47 forks source link

Option to disable URL encoding #19

Closed PostalBlab closed 2 years ago

PostalBlab commented 3 years ago

Hi! I want to replace a parameter value with a string containing a dollar sign "$". Auth Analyzer url encodes the dollar sign with "%24". In my case, the dollar sign is part of a password inside a JSON body, therefore the authentication fails due to the encoding. It would be awesome to device in the parameter replacement options do enable/disable the url encoding :)

simioni87 commented 3 years ago

Hello You are totally right; will be implemented with the next release. Thanks for this issue!

simioni87 commented 2 years ago

Implemented with releae 1.1.8