Skip to content

[FEATURE] Exclude common framework parameters #3

@msaindane

Description

@msaindane

IronWASP must include a list of some commonly known framework parameters / cookie names that can be ignored while scanning or fuzzing.

Here is a list of common params / cookies found in the ASP.NET framework:
Body Parameters:

__VIEWSTATE,__EVENTVALIDATION,__EVENTTARGET,__VIEWSTATEENCRYPTED,__EVENTARGUMENT,__LASTFOCUS,__ASYNCPOST

Cookie Names:

ASP.NET_SessionId

Something similar for popular frameworks like Java (Struts, Spring, etc.) and PHP

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions