Closed devl00p closed 4 months ago
Attention: Patch coverage is 75.20000%
with 31 lines
in your changes are missing coverage. Please review.
:exclamation: No coverage uploaded for pull request base (
master@dec4f26
). Click here to learn what that means.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Mutator
mutate()
function into 3 subfunctionsmutate()
prototype so the payload generator callback receive both the Request and Parameter object (generation of payload now has more context)SsrfMutator
somod_ssrf
use the default oneCan now find vulnerabilities by injecting payloads in JSON data:
Display and serialization of requests with application/json content-type was already supported (persister use a special key name called
__RAW__
) so no additional work was made for that.As the path to the vulnerable JSON entry can be long, the dot notation is used: