瀏覽代碼

modified WAF lab script to use curl instead of seige

main
kusum 3 月之前
父節點
當前提交
c2c98cfe3b
共有 1 個文件被更改,包括 8 次插入7 次删除
  1. 8
    7
      GSAutomation/waap-labs/waap_wafexceptions.sh

+ 8
- 7
GSAutomation/waap-labs/waap_wafexceptions.sh 查看文件

@@ -4,11 +4,12 @@
read -p "Enter the prefix: " prefix

# Define the path
PATHS='search?q=apple'
PATH='search?q=apple'

# Use siege to perform the request
siege "https://${prefix}.gslab-juiceshop.com/$PATHS" \
--header="waf_exception: <iframe src=\"javascript:alert('Perf Tool Test')\">" \
--content-type="application/x-www-form-urlencoded" \
--concurrent=1 \
--time=10S
/usr/bin/curl -s -S "https://$prefix.gslab-juiceshop.com/$PATH" \
-H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.193 Safari/537.36' \
-H 'waf_exception: <iframe src="javascript:alert(`Perf Tool Test`)">' \
--compressed \
-D - \
-o /dev/null
echo " Finished"

Loading…
取消
儲存