--prefix doesnt work

[kaizensecurity]

After submitting requests using --prefix command, ghauri will skip and ignore initial strings.

command:
ghauri -r lab.txt --prefix="validstring" --current-db

[r0oth3x49]

Can you explain a bit more with -v 3 verbosity..

[kaizensecurity]

`box@offsec ~ % ghauri -r /Users/box/Desktop/lab.txt --prefix=VALIDSTRING --current-db -v 5 --batch --technique=T

[22:49:32] [TRAFFIC_OUT] HTTP request [#1]:
POST /svpathHTTP/1.1

ctl00%24ScriptManager1=&ctl00%24ContentPlaceHolder1%24tbxNoRef=VALIDSTRING&__ASYNCPOST=true&

[22:49:33] [DEBUG] r1: 3261, r2: 3261
[22:49:33] [INFO] target URL content is stable
[22:49:33] [TRAFFIC_OUT] HTTP request [#3]:
POST /svpathHTTP/1.1

ctl00%24ScriptManager1=&ctl00%24ContentPlaceHolder1%24tbxNoRef='",..))&__ASYNCPOST=true&`

You can reproduce this with any vulnerable webapp. --prefix just wont work here.

[r0oth3x49]

Initial few requests without prefix is intensional to check if target returns some sort of db error. After that when the payload testing starts it should use the prefix provided. I will check this and try fixing ASAP