Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Toggle enable/disable url encoding on POST body web request #22

Open
tomat0paste opened this issue Jul 21, 2023 · 2 comments
Open

Toggle enable/disable url encoding on POST body web request #22

tomat0paste opened this issue Jul 21, 2023 · 2 comments
Labels
awaits confirmation The issue is supposed to be resolved, but requires some testing delayed The issue will be fixed with a big update later enhancement New feature or request template engine A template engine to add

Comments

@tomat0paste
Copy link

tomat0paste commented Jul 21, 2023

Hi! Your tool is awesome. I was playing along with it and it is very good on GET web request. And i think it will be pretty awesome to have an option of not URL encoding the POST web request.

URL encoded
url-encoded.png

URl decoded
url-decoded.png

This one here is out of topic but does this tool also support expression language like on swisskyrepo's SSTI EL code execution?

// Method using Reflection & Invoke

${"".getClass().forName("java.lang.Runtime").getMethods()[6].invoke("".getClass().forName("java.lang.Runtime")).exec("calc.exe")}
${''.getClass().forName('java.lang.Runtime').getMethods()[6].invoke(''.getClass().forName('java.lang.Runtime')).exec('whoami')}

@

@vladko312
Copy link
Owner

As for POST requests, I have plans to add support for more formats, such as text/plain and application/json, as well as some processing scripts, including urlencode.

As for Java EL, I will likely add it in the future, but it would take some time.

@vladko312 vladko312 added enhancement New feature or request template engine A template engine to add delayed The issue will be fixed with a big update later labels Jul 23, 2023
@vladko312
Copy link
Owner

vladko312 commented Jan 6, 2024

As for POST requests, should be possible in 1.2.0 using text data type
Can you verify?

@vladko312 vladko312 added the awaits confirmation The issue is supposed to be resolved, but requires some testing label Jan 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
awaits confirmation The issue is supposed to be resolved, but requires some testing delayed The issue will be fixed with a big update later enhancement New feature or request template engine A template engine to add
Projects
None yet
Development

No branches or pull requests

2 participants