Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzzing: Replace Regex Mode ( we currently support infix,postfix,prefix,replace ) #4847

Closed
Tracked by #4795
tarunKoyalwar opened this issue Mar 7, 2024 · 0 comments · Fixed by #4477
Closed
Tracked by #4795
Assignees

Comments

@tarunKoyalwar
Copy link
Member

tarunKoyalwar commented Mar 7, 2024

Proposed Changes

  • Nuclei Fuzzing module already supports postfix,prefix,infix,replace rules, which specify how to handle new payload value, but sometimes exact value may not be known while replacing .

Ex: replacing a numerical value in path with a sqli payload, while this can't be achieved using replace directly because it will replace complete path at once ( and path is not known earlier) but this can now be achieved using this

    fuzzing:
      - part: path
        type: replace-regex
        mode: single
        replace-regex: '/(.*?/)([0-9]+)(/.*)?'
        fuzz:
          - '/${1}${2}{{pathsqli}}${3}'
@tarunKoyalwar tarunKoyalwar changed the title Replace Regex Mode ( we currently support infix,postfix,prefix,replace ) Fuzzing: Replace Regex Mode ( we currently support infix,postfix,prefix,replace ) Mar 7, 2024
@tarunKoyalwar tarunKoyalwar self-assigned this Mar 7, 2024
@tarunKoyalwar tarunKoyalwar linked a pull request Mar 7, 2024 that will close this issue
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant