http-request-translator
http-request-translator copied to clipboard
owtf
HTTP Request Translator (hrt) translates raw HTTP requests to different scripts (bash, python, etc.)
Raw request ``` b'POST /tslwebapp/example/HelloWorld.action HTTP/1.1\r\nHost: 10.28.194.39:8080\r\nContent-Type: multipart/form-data; boundary=--------429242435\r\nContent-Length: 224\r\n\r\n----------429242435\r\nContent-Disposition: form-data; name="${#_memberAccess["allowStaticMethodAccess"]=true,@java.lang.Runtime@getRuntime().exec(\'touch /foo\')}=1"\r\n\r\n----------429242435--' ``` Request CURL translated by HRT ``` #!/usr/bin/env bash curl --data "----------429242435Content-Disposition: form-data; name=\"${#_memberAccess[\"allowStaticMethodAccess\"]=true,@java.lang.Runtime@getRuntime().exec('touch /foo')}=1\"----------429242435--" -v --request...
I am not sure where the current approach came from, it would be much more useful to simply paste the whole HTTP request once and have the translator translate directly...
It looks like the request translator will fail when an "unusual" http method like PUT is used, the http method might need to be something like "OMG" or anything else,...
This is a POC for adding a custom template. Currently this is intended to work when no language option is provided .
- [x] add tests for process_arguments - [ ] add tests for take_body These two methods cover a big part of the module. Right now, the test coverage is 77%.
An extremely cool feature to have here would be conversion to send the request via JavaScript only, so that the tester has a fully working initial draft to play with...
The unit tests for the project do not cover all of the code base, nor properly test everything. It would be nice to continue updating the tests to increase the...
The current documentation of the project (that one can find in '/doc/') is far from being complete. It is currently poorly written and does not contain much. That would be...