Skip to content

Add parameter command line option#85

Open
wdahlenburg wants to merge 1 commit into
epinna:masterfrom
wdahlenburg:inject_parameter
Open

Add parameter command line option#85
wdahlenburg wants to merge 1 commit into
epinna:masterfrom
wdahlenburg:inject_parameter

Conversation

@wdahlenburg

Copy link
Copy Markdown

Added the -p or --parameter option as a way to specify which parameter to attempt template injections on. By default all parameters are still tried.

For the example in the Readme:
python ./tplmap.py -u "http://127.0.0.1:8000/page?name=John&foobar=test" -p name

Only the name parameter will be tested.

This can be useful for reducing the number of attempts required to exploit and provides an alternate syntax to injecting the '*' character.

@shelld3v

shelld3v commented Dec 3, 2020

Copy link
Copy Markdown
Contributor

Hey @wdahlenburg, I have already done this in my PR: #79. Just the fact that @epinna didn't merge it

@wdahlenburg

Copy link
Copy Markdown
Author

image
Dang this could have saved me some time yesterday. It looks like we both chose different places in the code to filter for specific parameters.

I'll leave preference up to @epinna

@shelld3v

shelld3v commented Dec 3, 2020

Copy link
Copy Markdown
Contributor

🙄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants