浏览代码

modified WAF lab script to use curl instead of seige

main
kusum 3 个月前
父节点
当前提交
c2c98cfe3b
共有 1 个文件被更改,包括 8 次插入7 次删除
  1. 8
    7
      GSAutomation/waap-labs/waap_wafexceptions.sh

+ 8
- 7
GSAutomation/waap-labs/waap_wafexceptions.sh 查看文件

@@ -4,11 +4,12 @@
read -p "Enter the prefix: " prefix

# Define the path
PATHS='search?q=apple'
PATH='search?q=apple'

# Use siege to perform the request
siege "https://${prefix}.gslab-juiceshop.com/$PATHS" \
--header="waf_exception: <iframe src=\"javascript:alert('Perf Tool Test')\">" \
--content-type="application/x-www-form-urlencoded" \
--concurrent=1 \
--time=10S
/usr/bin/curl -s -S "https://$prefix.gslab-juiceshop.com/$PATH" \
-H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.193 Safari/537.36' \
-H 'waf_exception: <iframe src="javascript:alert(`Perf Tool Test`)">' \
--compressed \
-D - \
-o /dev/null
echo " Finished"

正在加载...
取消
保存