Skip to content

1.0. Basic Usage

Jump to bottom
gdgd009xcd edited this page Nov 14, 2023 · 9 revisions

1.0. Basic Usage

Attack Pattern File

This addon can configure custom attack pattern by customactivescan tab. customactivescan tab
attack pattern is parameter value which is used by CustomActiveScan. CustomActiveScan use boolean based injection test with using these attack patterns. boolean based injection test basics are following:

  1. make the True request by embeding the TrueValue to parameter of the original request, and send it.
  2. after receiving the True response, compare the response with the orignal one.
  3. make the False request by embeding the FalseValue to parameter of the original request , and send it.
  4. after receiving the False response, compare the response with the orignal one.
  5. if 2.the True response == the original response And 4.the False response != the original one, then injection is exist.

detail is described next

Clone this wiki locally