From 61e4f6e85e81c4f3499c135dd3be22a5011f8cc3 Mon Sep 17 00:00:00 2001 From: lanjelot Date: Fri, 29 Jun 2012 14:27:36 +1000 Subject: [PATCH] before_egrep now allows more than one expression --- patator.py | 25 +++++++++++++------------ 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/patator.py b/patator.py index ebc4a8c..7a4de24 100755 --- a/patator.py +++ b/patator.py @@ -377,13 +377,13 @@ http_fuzz url='http://10.0.0.1/login?username=admin&password=_@@_FILE0_@@_' -e _ 0=words.txt -x ignore:'code=200|size=1500-|fgrep=Welcome, unauthenticated user' -X'|' (b) (c) -* Brute-force logon that enforces a random nonce to be submitted along every POST. - (a) Request page that provides the nonce as a hidden input field using GET. - (b) Use regex to extract the nonce that is to be submitted by the main request. +* Brute-force logon that enforces two random nonces to be submitted along every POST. + (a) First, request the page that provides the nonces as hidden input fields. + (b) Use regular expressions to extract the nonces that are to be submitted along the main request. --------- -http_fuzz url=http://10.0.0.1/login method=POST body='user=admin&pass=FILE0&nonce=_@@_' accept_cookie=1 - before_urls=http://10.0.0.1/index before_egrep=_@@_:'nput type="hidden" name="nonce" value="(\w+)"/>' - (a) (b) +http_fuzz url=http://10.0.0.1/login method=POST body='user=admin&pass=FILE0&nonce1=_N1_&nonce2=_N2_' 0=passwords.txt accept_cookie=1 + before_urls=http://10.0.0.1/index before_egrep='_N1_: