proabiral / inception

A highly configurable Framework for easy automated web scanning

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature request: POST vs GET

geeknik opened this issue · comments

Would it be feasible to add a command line switch like -post so that it sends POST requests instead of GET requests? Thank you.

Hey, I have been working on this lately. Will probably publish it on first week of September.

Hi @geeknik ,
I have added the feature to support http method and body.
Please check out this commit.

There is a good possibility I'm doing something wrong, but I'm not seeing any requests against my host if I use POST, PUT or DELETE.

Hi @geeknik ,

Few things you might be doing wrong :

  1. Since the code is not pushed to master branch yet. You need to pull it from beta branch and run from there. https://github.com/proabiral/inception/tree/beta
  2. Methods are not taken from command line argument but taken from provider.json. The provider needs to be created from providerCreate.html here. The old one here is not yet updated.

Please feel free to let me know if there are any trouble.

Yes, yes.

Here is the provider.json that I created just as a test to see how the request looked on a local server of mine.

[
    {
        "vulnerability": "test",
        "method": "POST",
        "color": "red",
        "body": "{test:1}",
        "endpoint": [
            "/"
        ],
        "headers": [
            [
                "test",
                "1"
            ]
        ],
        "checkIn": "responseBody",
        "checkFor": "test:1"
    }
]

No request appears in /var/log/nginx/access.log or /var/log/nginx/error.log

The provider.json is working fine as I am receiving desired request using it.
Can you try using requestbin ?

Turned out to be a silly local problem. Haha. Thanks for adding this great feature. Do you have a donation box somewhere?