Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

$ dalfox payload[enum] --custom-payload --only-custom payload payloads.txt - (Question & Future Request) #613

Open
e393 opened this issue Dec 19, 2024 · 0 comments
Labels
question Further information is requested

Comments

@e393
Copy link

e393 commented Dec 19, 2024

Question

  1. can dalfox run the payload enumeration process along with using custom payloads at the same time? if so which has priority --custom-payload or payload [enum]
  • also does running '$dalfox payload' auto enum default payloads ? if so what is the format of these enumerations

  • i have my own payload generator and i have so it gen payloads based on CSP report of domain.com, it would be nice to enumerate payloads based on user custom input for 'c_events=alert()' and '<c_tags></c_tags>' and 'c_events=c_alerts()'

example of my logic:
user input: c_svg, c_event, c_alert + brute randomizer

"><c_tags c_events=c_alerts()></c_tags> =>
"><s.V.g OnLoAd=prOmpT()></.S.v.G.>

feature requests:
enumerate payloads based on user input
c_events.txt
c_tags.txt
c_alerts.txt

if dev wants to see an example of my generator and csp reporter, i would be happy to share, to get this implemented to Dalfox if logic isn't already implemented and im using the wrong flags.

Environment

  • Dalfox Version: 2.9.3
  • Installed from: go-get
@e393 e393 added the question Further information is requested label Dec 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

1 participant