Jtof fap http methods #8
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Collaborator
Author
|
Diff of diff --git a/tests-history/bup-payloads-2022-08-19.lst b/tests-history/bup-payloads-2022-09-11.lst
index 3179c06..8e9903b 100644
--- a/tests-history/bup-payloads-2022-08-19.lst
+++ b/tests-history/bup-payloads-2022-09-11.lst
@@ -1,5 +1,5 @@
-Bypasser has generated 1786 payloads for 'http://127.0.0.1:8000/foo/bar' url:
+Bypasser has generated 1880 payloads for 'http://127.0.0.1:8000/foo/bar' url:
[case_substitution] http://127.0.0.1:8000/Foo/bar
[case_substitution] http://127.0.0.1:8000/fOo/bar
[case_substitution] http://127.0.0.1:8000/foO/bar
@@ -804,6 +804,76 @@ Bypasser has generated 1786 payloads for 'http://127.0.0.1:8000/foo/bar' url:
[http_headers_ip] -H X-WAP-Profile: localhost http://127.0.0.1:8000/foo/bar
[http_headers_ip] -H X-WAP-Profile: norealhost http://127.0.0.1:8000/foo/bar
[http_headers_ip] -H X-WAP-Profile: null http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: ACL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: BIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: CHECKIN http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: CHECKOUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: CONNECT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: COPY http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: DELETE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: GET http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: HEAD http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: LABEL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: LINK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: LOCK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: MERGE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: MKCOL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: MOVE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: OPTIONS http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: ORDERPATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: PATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: POST http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: POUET http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: PRI http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: PROPFIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: PROPPATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: PUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: QUERY http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: REBIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: REPORT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: SEARCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: TRACE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: TRACK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: UNCHECKOUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: UNLOCK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: UPDATE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: UPDATEREDIRECTREF http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method-Override: VERSION-CONTROL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: ACL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: BIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: CHECKIN http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: CHECKOUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: CONNECT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: COPY http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: DELETE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: GET http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: HEAD http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: LABEL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: LINK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: LOCK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: MERGE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: MKCOL http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: MOVE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: OPTIONS http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: ORDERPATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: PATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: POST http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: POUET http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: PRI http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: PROPFIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: PROPPATCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: PUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: QUERY http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: REBIND http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: REPORT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: SEARCH http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: TRACE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: TRACK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: UNCHECKOUT http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: UNLOCK http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: UPDATE http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: UPDATEREDIRECTREF http://127.0.0.1:8000/foo/bar
+[http_headers_method] -H X-HTTP-Method: VERSION-CONTROL http://127.0.0.1:8000/foo/bar
[http_headers_port] -H X-Forwarded-Port: 443 http://127.0.0.1:8000/foo/bar
[http_headers_port] -H X-Forwarded-Port: 4443 http://127.0.0.1:8000/foo/bar
[http_headers_port] -H X-Forwarded-Port: 80 http://127.0.0.1:8000/foo/bar
@@ -814,17 +884,41 @@ Bypasser has generated 1786 payloads for 'http://127.0.0.1:8000/foo/bar' url:
[http_headers_scheme] -H X-Forwarded-Scheme: http http://127.0.0.1:8000/foo/bar
[http_headers_scheme] -H X-Forwarded-Scheme: https http://127.0.0.1:8000/foo/bar
[http_headers_scheme] -H X-Forwarded-Scheme: webdav http://127.0.0.1:8000/foo/bar
+[http_methods] -X ACL http://127.0.0.1:8000/foo/bar
+[http_methods] -X BIND http://127.0.0.1:8000/foo/bar
+[http_methods] -X CHECKIN http://127.0.0.1:8000/foo/bar
+[http_methods] -X CHECKOUT http://127.0.0.1:8000/foo/bar
[http_methods] -X CONNECT http://127.0.0.1:8000/foo/bar
+[http_methods] -X COPY http://127.0.0.1:8000/foo/bar
+[http_methods] -X DELETE http://127.0.0.1:8000/foo/bar
[http_methods] -X GET http://127.0.0.1:8000/foo/bar
+[http_methods] -X HEAD http://127.0.0.1:8000/foo/bar
+[http_methods] -X LABEL http://127.0.0.1:8000/foo/bar
+[http_methods] -X LINK http://127.0.0.1:8000/foo/bar
[http_methods] -X LOCK http://127.0.0.1:8000/foo/bar
+[http_methods] -X MERGE http://127.0.0.1:8000/foo/bar
+[http_methods] -X MKCOL http://127.0.0.1:8000/foo/bar
+[http_methods] -X MOVE http://127.0.0.1:8000/foo/bar
[http_methods] -X OPTIONS http://127.0.0.1:8000/foo/bar
+[http_methods] -X ORDERPATCH http://127.0.0.1:8000/foo/bar
[http_methods] -X PATCH http://127.0.0.1:8000/foo/bar
[http_methods] -X POST http://127.0.0.1:8000/foo/bar
[http_methods] -X POUET http://127.0.0.1:8000/foo/bar
+[http_methods] -X PRI http://127.0.0.1:8000/foo/bar
+[http_methods] -X PROPFIND http://127.0.0.1:8000/foo/bar
+[http_methods] -X PROPPATCH http://127.0.0.1:8000/foo/bar
[http_methods] -X PUT http://127.0.0.1:8000/foo/bar
+[http_methods] -X QUERY http://127.0.0.1:8000/foo/bar
+[http_methods] -X REBIND http://127.0.0.1:8000/foo/bar
+[http_methods] -X REPORT http://127.0.0.1:8000/foo/bar
+[http_methods] -X SEARCH http://127.0.0.1:8000/foo/bar
[http_methods] -X TRACE http://127.0.0.1:8000/foo/bar
[http_methods] -X TRACK http://127.0.0.1:8000/foo/bar
+[http_methods] -X UNCHECKOUT http://127.0.0.1:8000/foo/bar
+[http_methods] -X UNLOCK http://127.0.0.1:8000/foo/bar
[http_methods] -X UPDATE http://127.0.0.1:8000/foo/bar
+[http_methods] -X UPDATEREDIRECTREF http://127.0.0.1:8000/foo/bar
+[http_methods] -X VERSION-CONTROL http://127.0.0.1:8000/foo/bar
[http_versions] --http0.9 http://127.0.0.1:8000/foo/bar
[http_versions] --http1.0 http://127.0.0.1:8000/foo/bar
[http_versions] --http1.1 http://127.0.0.1:8000/foo/bar |
laluka
approved these changes
Sep 15, 2022
Owner
laluka
left a comment
laluka
left a comment
There was a problem hiding this comment.
Tellement plus simple d'add des modules mtn, nickel bro !
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Added support for a new bypass mode [
http_headers_method] and added most HTTP methods from https://webconcepts.info/concepts/http-method/.