Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add parameter command line option #85

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

wdahlenburg
Copy link

Added the -p or --parameter option as a way to specify which parameter to attempt template injections on. By default all parameters are still tried.

For the example in the Readme:
python ./tplmap.py -u "http://127.0.0.1:8000/page?name=John&foobar=test" -p name

Only the name parameter will be tested.

This can be useful for reducing the number of attempts required to exploit and provides an alternate syntax to injecting the '*' character.

@shelld3v
Copy link
Contributor

shelld3v commented Dec 3, 2020

Hey @wdahlenburg, I have already done this in my PR: #79. Just the fact that @epinna didn't merge it

@wdahlenburg
Copy link
Author

image
Dang this could have saved me some time yesterday. It looks like we both chose different places in the code to filter for specific parameters.

I'll leave preference up to @epinna

@shelld3v
Copy link
Contributor

shelld3v commented Dec 3, 2020

🙄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants